IN
Vendor
Insyde
109
CVEs
0
On KEV
0
New 30D
Products
IN9.8
Insydeh2o
Insyde
65 CVEs0 on KEV0 new
KE9.8
Kernel
Insyde
33 CVEs0 on KEV0 new
H27.8
H2offt
Insyde
2 CVEs0 on KEV0 new
H27.8
H2oelv
Insyde
1 CVEs0 on KEV0 new
H27.8
H2ooae
Insyde
1 CVEs0 on KEV0 new
H27.8
H2opcm
Insyde
1 CVEs0 on KEV0 new
H27.8
H2osde
Insyde
1 CVEs0 on KEV0 new
H27.8
H2ouve
Insyde
1 CVEs0 on KEV0 new
IB–
Insyde Bios
Insyde
1 CVEs0 on KEV0 new
IN7.1
Insydecrpkg
Insyde
1 CVEs0 on KEV0 new
IU9.8
Insydeh2o Uefi Bios
Insyde
1 CVEs0 on KEV0 new
IS7.1
Iscflashx64.sys
Insyde
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-55567 | IN Insydeh2o Insyde | 6.7 | Jun 12 | Improper input validation was discovered in UsbCoreDxe in Insyde InsydeH2O kernel 5.4 before 05.47.01, 5.5 before 05.55.01, 5.6 before 05.62.01, and 5.7 before 05.71.01 |
| CVE-2024-52880 | KE Kernel Insyde | 7.9 | May 15 | An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5.5 before version… |
| CVE-2024-52879 | IN Insydeh2o Insyde | 7.5 | May 15 | An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5.5 before version… |
| CVE-2024-52878 | IN Insydeh2o Insyde | 7.5 | May 15 | An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5.5 before version… |
| CVE-2024-52877 | IN Insydeh2o Insyde | 7.5 | May 15 | An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5.5 before version… |
| CVE-2024-49200 | KE Kernel Insyde | 6.4 | Apr 15 | An issue was discovered in AcpiS3SaveDxe and ChipsetSvcDxe in Insyde InsydeH2O with kernel 5.2 though 5.7 |
| CVE-2024-25079 | IN Insydeh2o Insyde | 7.4 | May 15 | A memory corruption vulnerability in HddPassword in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.09, kernel 5.5 before… |
| CVE-2024-25078 | KE Kernel Insyde | 7.4 | May 15 | A memory corruption vulnerability in StorageSecurityCommandDxe in Insyde InsydeH2O before kernel 5.2: IB19130163 in 05.29.07, kernel 5.3: IB19130163 in 05.38.07, kernel 5.4:… |
| CVE-2023-47252 | KE Kernel Insyde | 6.3 | Apr 26 | An issue was discovered in PnpSmm in Insyde InsydeH2O with kernel 5.0 through 5.6 |
| CVE-2022-46897 | KE Kernel Insyde | 5.3 | Apr 22 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2022-24351 | IN Insydeh2o Insyde | 4.7 | Dec 16 | TOCTOU race-condition vulnerability in Insyde InsydeH2O with Kernel 5.2 before version 05.27.29, Kernel 5.3 before version 05.36.29, Kernel 5.4 version before 05.44.13, and Kernel… |
| CVE-2023-39283 | IN Insydeh2o Insyde | 7.8 | Nov 2 | An SMM memory corruption vulnerability in the SMM driver (SMRAM write) in CsmInt10HookSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to send arbitrary data… |
| CVE-2023-39284 | IN Insydeh2o Insyde | 5.5 | Nov 2 | An issue was discovered in IhisiServicesSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2023-39281 | IN Insydeh2o Insyde | 9.8 | Nov 1 | A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to run arbitrary code execution during the… |
| CVE-2023-30633 | IN Insydeh2o Insyde | 5.3 | Oct 19 | An issue was discovered in TrEEConfigDriver in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2023-34195 | IN Insydeh2o Insyde | 7.8 | Sep 18 | An issue was discovered in SystemFirmwareManagementRuntimeDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2021-33834 | H2 H2offt Insyde | 7.1 | Sep 8 | An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00 |
| CVE-2023-27471 | IN Insydeh2o Insyde | 5.5 | Aug 18 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2023-31041 | IN Insydeh2o Insyde | 7.5 | Aug 14 | An issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2023-27373 | IN Insydeh2o Insyde | 5.5 | Aug 7 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2023-28468 | KE Kernel Insyde | 6.5 | Aug 3 | An issue was discovered in FvbServicesRuntimeDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2023-25600 | IN Insydecrpkg Insyde | 7.1 | Aug 3 | An issue was discovered in InsydeH2O |
| CVE-2023-22616 | IN Insydeh2o Insyde | 7.8 | Apr 12 | An issue was discovered in Insyde InsydeH2O with kernel 5.2 through 5.5 |
| CVE-2022-24350 | IN Insydeh2o Insyde | 5.5 | Apr 12 | An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2023-22613 | IN Insydeh2o Insyde | 8.8 | Apr 11 | An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2023-22615 | IN Insydeh2o Insyde | 8.4 | Apr 11 | An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2023-22614 | IN Insydeh2o Insyde | 8.8 | Apr 11 | An issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2023-22612 | IN Insydeh2o Insyde | 8.8 | Apr 11 | An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2022-32477 | IN Insydeh2o Insyde | 7.0 | Feb 15 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2022-32475 | IN Insydeh2o Insyde | 7.0 | Feb 15 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2022-32469 | IN Insydeh2o Insyde | 7.0 | Feb 15 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2022-32953 | IN Insydeh2o Insyde | 7.0 | Feb 15 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2022-32476 | IN Insydeh2o Insyde | 7.0 | Feb 15 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2022-32473 | IN Insydeh2o Insyde | 7.0 | Feb 15 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2022-32470 | IN Insydeh2o Insyde | 7.0 | Feb 15 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2022-32955 | IN Insydeh2o Insyde | 7.0 | Feb 15 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2022-32954 | IN Insydeh2o Insyde | 7.0 | Feb 15 | An issue was discovered in Insyde InsydeH2O with kernel 5.1 through 5.5 |
| CVE-2022-32478 | IN Insydeh2o Insyde | 7.0 | Feb 15 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2022-32474 | IN Insydeh2o Insyde | 7.0 | Feb 15 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2022-32471 | IN Insydeh2o Insyde | 7.0 | Feb 15 | An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2022-36337 | KE Kernel Insyde | 8.2 | Nov 23 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2022-35407 | KE Kernel Insyde | 7.8 | Nov 22 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2022-35897 | KE Kernel Insyde | 6.8 | Nov 21 | An stack buffer overflow vulnerability leads to arbitrary code execution issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5 |
| CVE-2022-29279 | KE Kernel Insyde | 8.2 | Nov 15 | Use of a untrusted pointer allows tampering with SMRAM and OS memory in SdHostDriver and SdMmcDevice Use of a untrusted pointer allows tampering with SMRAM and OS memory in… |
| CVE-2022-29278 | KE Kernel Insyde | 8.2 | Nov 15 | Incorrect pointer checks within the NvmExpressDxe driver can allow tampering with SMRAM and OS memory Incorrect pointer checks within the NvmExpressDxe driver can allow tampering… |
| CVE-2022-29276 | KE Kernel Insyde | 8.2 | Nov 15 | SMI functions in AhciBusDxe use untrusted inputs leading to corruption of SMRAM |
| CVE-2022-30772 | KE Kernel Insyde | 8.2 | Nov 15 | Manipulation of the input address in PnpSmm function 0x52 could be used by malware to overwrite SMRAM or OS kernel memory |
| CVE-2022-30771 | KE Kernel Insyde | 8.2 | Nov 15 | Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions Initialization function in PnpSmm could lead to SMRAM corruption when… |
| CVE-2022-30283 | KE Kernel Insyde | 7.5 | Nov 15 | In UsbCoreDxe, tampering with the contents of the USB working buffer using DMA while certain USB transactions are in process leads to a TOCTOU problem that could be used by an… |
| CVE-2022-29275 | KE Kernel Insyde | 8.2 | Nov 15 | In UsbCoreDxe, untrusted input may allow SMRAM or OS memory tampering Use of untrusted pointers could allow OS or SMRAM memory tampering leading to escalation of privileges |
| CVE-2022-33986 | KE Kernel Insyde | 6.4 | Nov 15 | DMA attacks on the parameter buffer used by the VariableRuntimeDxe software SMI handler could lead to a TOCTOU attack |
| CVE-2022-33985 | KE Kernel Insyde | 7.0 | Nov 15 | DMA transactions which are targeted at input buffers used for the NvmExpressDxe software SMI handler could cause SMRAM corruption through a TOCTOU attack |
| CVE-2022-33984 | KE Kernel Insyde | 7.0 | Nov 15 | DMA transactions which are targeted at input buffers used for the SdMmcDevice software SMI handler could cause SMRAM corruption through a TOCTOU attack |
| CVE-2022-33983 | KE Kernel Insyde | 7.0 | Nov 15 | DMA transactions which are targeted at input buffers used for the NvmExpressLegacy software SMI handler could cause SMRAM corruption through a TOCTOU attack |
| CVE-2022-33909 | KE Kernel Insyde | 7.0 | Nov 15 | DMA transactions which are targeted at input buffers used for the HddPassword software SMI handler could cause SMRAM corruption through a TOCTOU attack |
| CVE-2022-33908 | KE Kernel Insyde | 7.0 | Nov 15 | DMA transactions which are targeted at input buffers used for the SdHostDriver software SMI handler could cause SMRAM corruption through a TOCTOU attack |
| CVE-2022-33906 | KE Kernel Insyde | 6.4 | Nov 15 | DMA transactions which are targeted at input buffers used for the FwBlockServiceSmm software SMI handler could cause SMRAM corruption through a TOCTOU attack |
| CVE-2022-33905 | KE Kernel Insyde | 7.0 | Nov 15 | DMA transactions which are targeted at input buffers used for the AhciBusDxe software SMI handler could cause SMRAM corruption (a TOCTOU attack) |
| CVE-2022-32267 | KE Kernel Insyde | 6.4 | Nov 15 | DMA transactions which are targeted at input buffers used for the SmmResourceCheckDxe software SMI handler cause SMRAM corruption (a TOCTOU attack) DMA transactions which are… |
| CVE-2022-31243 | KE Kernel Insyde | 6.4 | Nov 15 | Update description and links DMA transactions which are targeted at input buffers used for the software SMI handler used by the FvbServicesRuntimeDxe driver could cause SMRAM… |