Veille CVE

Recherche « Insyde Software InsydeH2O »

8 CVE

Critique 0 Élevée 4 Moyenne 3 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Insyde Software InsydeH2O » ✕
  1. CVE-2026-6485 8.2 Élevée

    Insyde Software InsydeH2O

    UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts.

  2. CVE-2026-12855 8.2 Élevée

    Insyde Software InsydeH2O

    Unvalidated memory boundary could result in arbitrary code execution. The vulnerability exists in the code developed specifically for HP projects.

  3. CVE-2021-43614 6.7 Moyenne

    Insyde Software InsydeH2O

    Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure.

  4. CVE-2021-43613 6.5 Moyenne

    Insyde Software InsydeH2O

    An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in runtime UEFI variables, leading to escalation of privilege

  5. CVE-2021-38489 8.2 Élevée

    Insyde Software InsydeH2O

    HDD password plaintext is stored in a UEFI variable.

  6. CVE-2026-9805 2.7 Faible

    Insyde Software InsydeH2O

    SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data without checking buffer size and could cause buffer overflow.

  7. CVE-2026-8810 6.9 Moyenne

    Insyde Software InsydeH2O, InsydeH2O ARM

    On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables.

  8. CVE-2026-6484 8.2 Élevée

    Insyde Software InsydeH2O

    In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution.