https://vulnogram.org/ Most recent CVEs assigned by Insyde Software (insyde). https://vulnogram.org/seaview/icons/insyde.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-12855 https://vulnogram.org/CVE-2026-12855 Unvalidated memory boundary could result in arbitrary code execution. The vulnerability exists in the code developed specifically for HP projects. High Wed, 09 Sep 2026 03:59:11 GMT https://vulnogram.org/CVE-2026-6485 https://vulnogram.org/CVE-2026-6485 UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts. High Wed, 09 Sep 2026 03:54:01 GMT https://vulnogram.org/CVE-2021-38489 https://vulnogram.org/CVE-2021-38489 HDD password plaintext is stored in a UEFI variable. High Thu, 03 Sep 2026 02:25:11 GMT https://vulnogram.org/CVE-2021-43614 https://vulnogram.org/CVE-2021-43614 Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure. Medium Thu, 03 Sep 2026 02:15:34 GMT https://vulnogram.org/CVE-2021-43613 https://vulnogram.org/CVE-2021-43613 An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in runtime UEFI variables, leading to escalation of privilege Medium Thu, 03 Sep 2026 02:05:35 GMT https://vulnogram.org/CVE-2026-9805 https://vulnogram.org/CVE-2026-9805 SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data without checking buffer size and could cause buffer overflow. Low Wed, 26 Aug 2026 01:00:25 GMT https://vulnogram.org/CVE-2026-8810 https://vulnogram.org/CVE-2026-8810 On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables. Medium Wed, 19 Aug 2026 06:03:22 GMT https://vulnogram.org/CVE-2026-6484 https://vulnogram.org/CVE-2026-6484 In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution. High Wed, 12 Aug 2026 00:20:36 GMT https://vulnogram.org/CVE-2025-12053 https://vulnogram.org/CVE-2025-12053 The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow. High Wed, 14 Jan 2026 01:27:11 GMT https://vulnogram.org/CVE-2025-12052 https://vulnogram.org/CVE-2025-12052 The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow. High Wed, 14 Jan 2026 01:23:54 GMT https://vulnogram.org/CVE-2025-12051 https://vulnogram.org/CVE-2025-12051 The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow. High Wed, 14 Jan 2026 01:17:54 GMT https://vulnogram.org/CVE-2025-12050 https://vulnogram.org/CVE-2025-12050 The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow. High Wed, 14 Jan 2026 01:13:33 GMT https://vulnogram.org/CVE-2025-10451 https://vulnogram.org/CVE-2025-10451 Unchecked output buffer may allowed arbitrary code execution in SMM and potentially result in SMM memory corruption. High Fri, 12 Dec 2025 00:28:52 GMT https://vulnogram.org/CVE-2025-4410 https://vulnogram.org/CVE-2025-4410 A buffer overflow vulnerability exists in the module SetupUtility. An attacker with local privileged access can exploit this vulnerability by executeing arbitrary code. High Wed, 13 Aug 2025 01:49:47 GMT https://vulnogram.org/CVE-2025-4277 https://vulnogram.org/CVE-2025-4277 Tcg2Smm has a vulnerability which can be used to write arbitrary memory inside SMRAM and execute arbitrary code at SMM level. High Wed, 13 Aug 2025 01:46:22 GMT https://vulnogram.org/CVE-2025-4276 https://vulnogram.org/CVE-2025-4276 UsbCoreDxe has a vulnerability which can be used to write arbitrary memory inside SMRAM and execute arbitrary code at SMM level. High Wed, 13 Aug 2025 01:41:56 GMT https://vulnogram.org/CVE-2025-4426 https://vulnogram.org/CVE-2025-4426 The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/product_securit… Medium Wed, 30 Jul 2025 00:46:27 GMT https://vulnogram.org/CVE-2025-4425 https://vulnogram.org/CVE-2025-4425 The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/product_securit… High Wed, 30 Jul 2025 00:45:32 GMT https://vulnogram.org/CVE-2025-4424 https://vulnogram.org/CVE-2025-4424 The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/product_securit… Medium Wed, 30 Jul 2025 00:43:53 GMT https://vulnogram.org/CVE-2025-4423 https://vulnogram.org/CVE-2025-4423 The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/product_securit… High Wed, 30 Jul 2025 00:42:01 GMT https://vulnogram.org/CVE-2025-4422 https://vulnogram.org/CVE-2025-4422 The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/product_securit… High Wed, 30 Jul 2025 00:40:47 GMT https://vulnogram.org/CVE-2025-4421 https://vulnogram.org/CVE-2025-4421 The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/product_securit… High Wed, 30 Jul 2025 00:39:28 GMT https://vulnogram.org/CVE-2025-4275 https://vulnogram.org/CVE-2025-4275 A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated NVRAM variable. An attacker may to execute arbitrar… High Wed, 11 Jun 2025 00:25:17 GMT