Insyde vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-6485 UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts.High 8.2 · Sep 9, 2026
• CVE-2026-12855 Unvalidated memory boundary could result in arbitrary code execution.High 8.2 · Sep 9, 2026
• CVE-2021-38489 HDD password plaintext is stored in a UEFI variable.High 8.2 · Sep 3, 2026
• CVE-2026-6484 In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution.High 8.2 · Aug 11, 2026
• CVE-2025-12053 The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a High 7.8 · Jan 13, 2026
• CVE-2025-12052 The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a High 7.8 · Jan 13, 2026
• CVE-2025-12051 The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a High 7.8 · Jan 13, 2026
• CVE-2025-12050 The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a High 7.8 · Jan 13, 2026
• CVE-2025-10451 Unchecked output buffer may allowed arbitrary code execution in SMM and potentially result in SMM memory corruption.High 8.2 · Dec 11, 2025
• CVE-2025-4410 A buffer overflow vulnerability exists in the module SetupUtility.High 7.5 · Aug 12, 2025
• CVE-2025-4277 Tcg2Smm has a vulnerability which can be used to write arbitrary memory inside SMRAM and execute arbitrary code at SMM level.High 7.5 · Aug 12, 2025
• CVE-2025-4276 UsbCoreDxe has a vulnerability which can be used to write arbitrary memory inside SMRAM and execute arbitrary code at SMM level.High 7.5 · Aug 12, 2025
• CVE-2025-4425 The vulnerability was identified in the code developed specifically for Lenovo.High 8.2 · Jul 29, 2025
• CVE-2025-4423 The vulnerability was identified in the code developed specifically for Lenovo.High 8.2 · Jul 29, 2025
• CVE-2025-4422 The vulnerability was identified in the code developed specifically for Lenovo.High 8.2 · Jul 29, 2025
• CVE-2025-4421 The vulnerability was identified in the code developed specifically for Lenovo.High 8.2 · Jul 29, 2025
• CVE-2024-55567 Improper input validation was discovered in UsbCoreDxe in Insyde InsydeH2O kernel 5.4 before 05.47.01, 5.5 before 05.55.01, 5.6 before 05.62.01, and 5.7 before High 7.5 · Jun 12, 2025
• CVE-2025-4275 A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verifiHigh 7.8 · Jun 10, 2025
• CVE-2024-52880 An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5High 7.9 · May 15, 2025
• CVE-2024-52879 An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5High 7.5 · May 15, 2025
• CVE-2024-52878 An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5High 7.5 · May 15, 2025
• CVE-2024-52877 An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5High 7.5 · May 15, 2025
• CVE-2024-33228 An issue in the component segwindrvx64.sys of Insyde Software Corp SEG Windows Driver v100.00.07.02 allows attackers to escalate privileges and execute arbitrarHigh 8.4 · May 22, 2024
• CVE-2024-27353 A memory corruption vulnerability in SdHost and SdMmcDevice in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.High 7.4 · May 15, 2024
• CVE-2024-25079 A memory corruption vulnerability in HddPassword in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.09, kernel High 7.4 · May 15, 2024