Insyde Software
Vulnerability activity for Insyde Software: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 5
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 5
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 8.2HighSep 9, 2026InsydeH2OCVE-2026-6485UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts.
- 8.2HighSep 9, 2026InsydeH2O Code / command injectionCVE-2026-12855Unvalidated memory boundary could result in arbitrary code execution. The vulnerability exists in the code developed specifically for HP projects.
- 6.7MediumSep 3, 2026InsydeH2O Memory corruptionCVE-2021-43614Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure.
- 6.5MediumSep 3, 2026InsydeH2O Privilege escalationCVE-2021-43613An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in runtime UEFI variables, leading to escalation of privilege
- 8.2HighSep 3, 2026InsydeH2OCVE-2021-38489HDD password plaintext is stored in a UEFI variable.
Top products
- InsydeH2O5 CVEs in the last year
Advisories
Official advisories from the last 90 days that name this vendor's CVEs.
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.