Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2026-12855

H19WMIHandlerSmm: unvalidated memory boundary could result in arbitrary code execution.

Unvalidated memory boundary could result in arbitrary code execution. The vulnerability exists in the code developed specifically for HP projects.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Insyde Software
Products
Insydeh2o
CVE-2026-6485

UEFI BIOS embedded Shell can be used to bypass Secure Boot

UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Insyde Software
Products
Insydeh2o
CVE-2021-43613

SysPasswordDxe: Password hashes are exposed in runtime UEFI variables, leading to escalation of privilege

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in runtime UEFI variables, leading to escalation of privilege

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Insyde Software
Products
Insydeh2o
CVE-2021-43614

VariableEditSmm: Error checking of UEFI variables could cause buffer overflow, leading to code execution

Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Insyde Software
Products
Insydeh2o