KE
Product
Kernel
by Insyde · last CVE May 15, 2025
33
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 18Medium 14Low 0
Watch

Add Kernel to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-35897
6.8
0%
Nov 21
An stack buffer overflow vulnerability leads to arbitrary code execution issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5
Affected: 5.0 through 5.5
CVE-2023-28468
6.5
0%
Aug 3
An issue was discovered in FvbServicesRuntimeDxe in Insyde InsydeH2O with kernel 5.0 through 5.5
Affected: 5.0 through 5.5
CVE-2024-49200
6.4
0%
Apr 15
An issue was discovered in AcpiS3SaveDxe and ChipsetSvcDxe in Insyde InsydeH2O with kernel 5.2 though 5.7
Affected: 5.2; 5.3; 5.4; 5.5; 5.6; 5.7
CVE-2022-33986
6.4
0%
Nov 15
DMA attacks on the parameter buffer used by the VariableRuntimeDxe software SMI handler could lead to a TOCTOU attack
Affected: 5.4 before 5.4.05.44.23; 5.5 before 5.5.05.52.23
CVE-2022-33906
6.4
0%
Nov 15
DMA transactions which are targeted at input buffers used for the FwBlockServiceSmm software SMI handler could cause SMRAM corruption through a TOCTOU attack
Affected: 5.2 before 5.2.05.27.23; 5.3 before 5.3.05.36.23; 5.4 before 5.4.05.44.23; 5.5 before 5.5.05.52.23
CVE-2022-32267
6.4
0%
Nov 15
DMA transactions which are targeted at input buffers used for the SmmResourceCheckDxe software SMI handler cause SMRAM corruption (a TOCTOU attack) DMA transactions which are…
Affected: 5.2 before 5.2.05.27.23; 5.3 before 5.3.05.36.23; 5.4 before 5.4.05.44.23; 5.5 before 5.5.05.52.23
CVE-2022-31243
6.4
0%
Nov 15
Update description and links DMA transactions which are targeted at input buffers used for the software SMI handler used by the FvbServicesRuntimeDxe driver could cause SMRAM…
Affected: 5.2 before 5.2.05.27.21; 5.3 before 5.3.05.36.21; 5.4 before 5.4.05.44.21; 5.5 before 5.5.05.52.21
CVE-2022-30774
6.4
0%
Nov 15
DMA attacks on the parameter buffer used by the PnpSmm driver could change the contents after parameter values have been checked but before they are used (a TOCTOU attack) DMA…
Affected: 5.2 before 5.2.05.27.29; 5.3 before 5.3.05.36.25; 5.4 before 5.4.05.44.25; 5.5 before 5.5.05.52.25
CVE-2022-33982
6.4
0%
Nov 14
DMA attacks on the parameter buffer used by the Int15ServiceSmm software SMI handler could lead to a TOCTOU attack on the SMI handler and lead to corruption of SMRAM
Affected: 5.2 before 5.2.05.27.23; 5.3 before 5.3.05.36.23; 5.4 before 5.4.05.44.23; 5.5 before 5.5.05.52.23
CVE-2022-33907
6.4
0%
Nov 14
DMA transactions which are targeted at input buffers used for the software SMI handler used by the IdeBusDxe driver could cause SMRAM corruption through a TOCTOU attack
Affected: 5.2 before 5.2.05.27.25; 5.3 before 5.3.05.36.25; 5.4 before 5.4.05.44.25
CVE-2022-32266
6.4
0%
Nov 14
DMA attacks on the parameter buffer used by a software SMI handler used by the driver PcdSmmDxe could lead to a TOCTOU attack on the SMI handler and lead to corruption of other…
Affected: 5.3 before 5.3.05.36.23; 5.4 before 5.4.05.44.23; 5.5 before 5.5.05.52.23
CVE-2022-30773
6.4
0%
Nov 14
DMA attacks on the parameter buffer used by the IhisiSmm driver could change the contents after parameter values have been checked but before they are used (a TOCTOU attack)
Affected: 5.4 before 5.4.05.44.23; 5.5 before 5.5.05.52.23
CVE-2023-47252
6.3
0%
Apr 26
An issue was discovered in PnpSmm in Insyde InsydeH2O with kernel 5.0 through 5.6
Affected: 5.2 before 5.28.45; 5.3 before 5.37.45; 5.4 before 5.45.45; 5.5 before 5.53.45; 5.6 before 5.60.45
CVE-2022-46897
5.3
0%
Apr 22
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5
Affected: 5.0 through 5.5
Showing 14