Skip to contentInsyde Software Insydeh2o vulnerabilities
- insyde software insydeh2oH19WMIHandlerSmm: unvalidated memory boundary could result in arbitrary code execution.CVE-2026-128558.2 High
- insyde software insydeh2oUEFI BIOS embedded Shell can be used to bypass Secure BootCVE-2026-64858.2 High
- insyde software insydeh2oHDD Password Stored In PlaintextCVE-2021-384898.2 High
- insyde software insydeh2oVariableEditSmm: Error checking of UEFI variables could cause buffer overflow, leading to code executionCVE-2021-436146.7 Medium
- insyde software insydeh2oSysPasswordDxe: Password hashes are exposed in runtime UEFI variables, leading to escalation of privilegeCVE-2021-436136.5 Medium
- insyde software insydeh2oFMTSWriteUseIntelLib: FMTS SMM IHISI Buffer OverflowCVE-2026-98052.7 Low
- insyde software insydeh2o, insydeh2o armHDD Password leakage vulnerabilityCVE-2026-88106.9 Medium
- insyde software insydeh2oLack of verified boot to certain FV may cause arbitrary code executionCVE-2026-64848.2 High
- insyde software insydeh2o toolsegwindrvx64.sys is potentially vulnerable to a buffer overflowCVE-2025-120537.8 High
- insyde software insydeh2o toolsegwindrv.sys is potentially vulnerable to a buffer overflow.CVE-2025-120527.8 High
- insyde software insydeh2o toolsH2OFFT64.sys is potentially vulnerable to a buffer overflow.CVE-2025-120517.8 High
- insyde software insydeh2o toolsIn H2OFFT32.sys is potentially vulnerable to a buffer overflow.CVE-2025-120507.8 High
- insyde software insydeh2oH19Int15CallbackSmm: SMM memory corruption vulnerability in combined DXE/SMM (SMRAM write)CVE-2025-104518.2 High
- insyde software insydeh2oSetupUtility: A buffer overflow vulnerability leads to arbitrary code execution.CVE-2025-44107.5 High
- insyde software insydeh2oTcg2Smm: improper input validation may lead to arbitrary code executionCVE-2025-42777.5 High
- insyde software insydeh2oUsbCoreDxe: improper input validation may lead to arbitrary code executionCVE-2025-42767.5 High
- insyde software insydeh2oSetupAutomationSmm : SMRAM memory contents leak / information disclosure vulnerability in SMM moduleCVE-2025-44266.0 Medium
- insyde software insydeh2oSetupAutomationSmm: Stack overflow vulnerability in SMI handlerCVE-2025-44258.2 High
- insyde software insydeh2oSetupAutomationSmm : Arbitrary calls to SmmSetVariable with unsanitised arguments in SMI handlerCVE-2025-44246.0 Medium
- insyde software insydeh2oSetupAutomationSmm:Vulnerability in the SMM module allow attacker to write arbitrary code and lead to memory corruptionCVE-2025-44238.2 High
- insyde software insydeh2oEfiSmiServices : EfiPcdProtocol, SMM memory corruption vulnerabilities in SMM moduleCVE-2025-44228.2 High
- insyde software insydeh2oEfiSmiServices: gEfiSmmCpuProtocol, SMM memory corruption vulnerabilities in SMM moduleCVE-2025-44218.2 High
- insyde software insydeh2oSecureFlashDxe: Incorrect UEFI variable attributes check allows usage of invalid certificateCVE-2025-4275Public exploit7.8 High