insyde Vulnerability Advisory Catalog

Total 101 security vulnerabilities recorded for insyde software and firmware.

← Back to All Vendors
CVE-2020-5955 CRITICAL
Component: insydeh2o_uefi_bios

An issue was discovered in Int15MicrocodeSmm in Insyde InsydeH2O before 2021-10-14 on Intel client chipsets. A caller may be able to escalate privileg...

📅 2021-11-03
CVSS 9.8 Dossier →
Component: insydeh2o

A vulnerability exists in SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocate...

📅 2021-10-01
CVSS 7.8 Dossier →
Component: insydeh2o

In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers did not correctly validate the CommBuffer and CommBufferSize parameters, allowing callers t...

📅 2021-06-16
CVSS 6.7 Dossier →
Component: h2oelv

Improper access control in the Insyde software tools may allow an authenticated user to potentially enable escalation of privilege, or information dis...

📅 2019-08-26
CVSS 7.8 Dossier →
CVE-2005-4175 UNKNOWN
Component: insyde_bios

Insyde BIOS V190 does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users ...

📅 2005-12-11
CVSS 2.1 Dossier →
Page 5 of 5 (101 Total Records)