Insyde-software
6 CVEs tracked since 2025. Since Jul 2025, none of them reached CISA KEV.
Insyde-software CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2025-07 | 6 | 0 |
Products
The products that kept showing up in Insyde-software's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Insyde-software.
- CVE-2026-12855H19WMIHandlerSmm: unvalidated memory boundary could result in arbitrary code execution.8.2
- CVE-2026-6485UEFI BIOS embedded Shell can be used to bypass Secure Boot8.2
- CVE-2021-38489HDD Password Stored In Plaintext8.2
- CVE-2021-43614VariableEditSmm: Error checking of UEFI variables could cause buffer overflow, leading to code execution6.7
- CVE-2021-43613SysPasswordDxe: Password hashes are exposed in runtime UEFI variables, leading to escalation of privilege6.5
- CVE-2026-9805FMTSWriteUseIntelLib: FMTS SMM IHISI Buffer Overflow2.7
- CVE-2026-8810HDD Password leakage vulnerability6.9
- CVE-2026-6484Lack of verified boot to certain FV may cause arbitrary code execution8.2
- CVE-2025-12053egwindrvx64.sys is potentially vulnerable to a buffer overflow7.8
- CVE-2025-12052egwindrv.sys is potentially vulnerable to a buffer overflow.7.8
- CVE-2025-12051H2OFFT64.sys is potentially vulnerable to a buffer overflow.7.8
- CVE-2025-12050In H2OFFT32.sys is potentially vulnerable to a buffer overflow.7.8
- CVE-2025-10451H19Int15CallbackSmm: SMM memory corruption vulnerability in combined DXE/SMM (SMRAM write)8.2
- CVE-2025-4410SetupUtility: A buffer overflow vulnerability leads to arbitrary code execution.7.5
- CVE-2025-4277Tcg2Smm: improper input validation may lead to arbitrary code execution7.5
The record
- Peak rank
- #159 in Jul 2025
- Busiest month shown
- Jul 2025, 6 CVEs
- Months with a KEV entry
- 0 since Jul 2025
- Monthly snapshots
- 1 since 2025