Product by Insyde
UEFI Firmware
13 known vulnerabilities in UEFI Firmware (Insyde), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-5535 | SSL_select_next_proto buffer overread | 9.1 | |
| Medium | CVE-2024-2511 | Unbounded memory growth with session handling in TLSv1.3 | 5.9 | |
| High | CVE-2024-4741 | Use After Free with SSL_free_buffers | 7.5 | |
| Medium | CVE-2024-8096 | OCSP stapling bypass with GnuTLS | 6.5 | |
| High | CVE-2026-6484 | Lack of verified boot to certain FV may cause arbitrary code execution | 8.2 | |
| Medium | CVE-2024-13176 | Timing side-channel in ECDSA signature computation | 4.1 | |
| Medium | CVE-2024-38796 | Integer overflow in PeCoffLoaderRelocateImage | 5.9 | |
| Medium | CVE-2026-8810 | HDD Password leakage vulnerability | 6.9 | |
| High | CVE-2025-12050 | Insyde Software InsydeH2O tools: Out-of-bounds Write | 7.8 | |
| High | CVE-2025-12052 | Insyde Software InsydeH2O tools: Out-of-bounds Write | 7.8 | |
| High | CVE-2025-12051 | Insyde Software InsydeH2O tools: Out-of-bounds Write | 7.8 | |
| High | CVE-2025-12053 | egwindrvx64.sys is potentially vulnerable to a buffer overflow | 7.8 | |
| Medium | CVE-2024-1298 | Integer Overflow caused by divide by zero during S3 suspension | 6.0 |