Insyde Software

16 CVEs across 2 Insyde Software products. Browse Insyde Software vulnerabilities, severities, and proof-of-concept exploits.

Insyde Software products with known CVEs

ProductCVEs
Insydeh2o12
Insydeh2o Tools4
Insyde Software CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-6484High8.22026-08-12In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution.
CVE-2025-12053High7.82026-01-14The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a…
CVE-2025-12052High7.82026-01-14The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a…
CVE-2025-12051High7.82026-01-14The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a…
CVE-2025-12050High7.82026-01-14The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a…
CVE-2025-10451High8.22025-12-12Unchecked output buffer may allowed arbitrary code execution in SMM and potentially result in SMM memory corruption.
CVE-2025-4410High7.52025-08-13A buffer overflow vulnerability exists in the module SetupUtility. An attacker with local privileged access can exploit this vulnerability by executeing arbitr…
CVE-2025-4277High7.52025-08-13Tcg2Smm has a vulnerability which can be used to write arbitrary memory inside SMRAM and execute arbitrary code at SMM level.
CVE-2025-4276High7.52025-08-13UsbCoreDxe has a vulnerability which can be used to write arbitrary memory inside SMRAM and execute arbitrary code at SMM level.
CVE-2025-4426Medium6.02025-07-30The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for…
CVE-2025-4425High8.22025-07-30The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for…
CVE-2025-4424Medium6.02025-07-30The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for…
CVE-2025-4423High8.22025-07-30The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for…
CVE-2025-4422High8.22025-07-30The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for…
CVE-2025-4421High8.22025-07-30The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for…
CVE-2025-4275High7.82025-06-11A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verif…