Vendor
Insyde
118 known vulnerabilities in products by Insyde, 0 of them actively exploited (CISA KEV).
Key figures
118
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-5535 | SSL_select_next_proto buffer overread | 9.1 | |
| Medium | CVE-2024-2511 | Unbounded memory growth with session handling in TLSv1.3 | 5.9 | |
| High | CVE-2024-4741 | Use After Free with SSL_free_buffers | 7.5 | |
| Critical | CVE-2021-41842 | Insydeh2o: Code Execution | 9.8 | |
| High | CVE-2021-38575 | TianoCore EDK II: Buffer Underflow | 8.1 | |
| Critical | CVE-2020-5955 | Insydeh2o UEFI BIOS: Privilege Escalation | 9.8 | |
| Medium | CVE-2023-40238 | Insydeh2o: security vulnerability | 5.5 | |
| Medium | CVE-2024-8096 | OCSP stapling bypass with GnuTLS | 6.5 | |
| High | CVE-2026-6484 | Lack of verified boot to certain FV may cause arbitrary code execution | 8.2 | |
| Critical | CVE-2021-38578 | TianoCore EDK II: Buffer Underflow | 7.4 | |
| Critical | CVE-2023-39281 | Insydeh2o: Stack-Based Buffer Overflow | 9.8 | |
| Medium | CVE-2024-13176 | Timing side-channel in ECDSA signature computation | 4.1 | |
| High | CVE-2020-5956 | Insydeh2o: security vulnerability | 7.5 | |
| Medium | CVE-2024-38796 | Integer overflow in PeCoffLoaderRelocateImage | 5.9 | |
| High | CVE-2024-52879 | Insydeh2o: Buffer Over-read | 7.5 | |
| High | CVE-2024-52878 | Insydeh2o: Buffer Over-read | 7.5 | |
| High | CVE-2024-52877 | Insydeh2o: Buffer Over-read | 7.5 | |
| High | CVE-2025-10451 | H19Int15CallbackSmm: SMM memory corruption vulnerability in combined DXE/SMM (SMRAM write) | 8.2 | |
| Medium | CVE-2026-8810 | HDD Password leakage vulnerability | 6.9 | |
| High | CVE-2022-36338 | Insydeh2o: Code Execution | 8.2 | |
| High | CVE-2023-22614 | Insydeh2o: Memory Corruption | 8.8 | |
| Medium | CVE-2024-49200 | Insyde Kernel: Memory Corruption | 6.4 | |
| High | CVE-2025-12050 | Insyde Software InsydeH2O tools: Out-of-bounds Write | 7.8 | |
| High | CVE-2025-12052 | Insyde Software InsydeH2O tools: Out-of-bounds Write | 7.8 | |
| High | CVE-2025-12053 | egwindrvx64.sys is potentially vulnerable to a buffer overflow | 7.8 |
Products
| Insydeh2o | 66 | 0 |
| Kernel | 33 | 0 |
| UEFI Firmware | 13 | 0 |