Vulnerabilities > Insyde > Insydeh2O > 5.3.05.37.47

DATE CVE VULNERABILITY TITLE RISK
2023-11-02 CVE-2023-39283 Out-of-bounds Write vulnerability in Insyde Insydeh2O
An SMM memory corruption vulnerability in the SMM driver (SMRAM write) in CsmInt10HookSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to send arbitrary data to SMM which could lead to privilege escalation.
local
low complexity
insyde CWE-787
7.8
2023-04-12 CVE-2022-24350 Classic Buffer Overflow vulnerability in Insyde Insydeh2O
An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5.
local
low complexity
insyde CWE-120
5.5
2023-04-12 CVE-2023-22616 Externally Controlled Reference to a Resource in Another Sphere vulnerability in Insyde Insydeh2O
An issue was discovered in Insyde InsydeH2O with kernel 5.2 through 5.5.
local
low complexity
insyde CWE-610
7.8
2022-11-14 CVE-2022-34325 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Insyde Insydeh2O
DMA transactions which are targeted at input buffers used for the StorageSecurityCommandDxe software SMI handler could cause SMRAM corruption through a TOCTOU attack.
local
high complexity
insyde CWE-367
7.8
2022-09-23 CVE-2022-35893 Improper Input Validation vulnerability in Insyde Insydeh2O
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.
local
low complexity
insyde CWE-20
8.2
2022-09-23 CVE-2022-36338 Unspecified vulnerability in Insyde Insydeh2O
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.
local
low complexity
insyde
8.2
2022-09-22 CVE-2022-35894 Memory Leak vulnerability in Insyde Insydeh2O
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.
local
low complexity
insyde CWE-401
6.0
2022-09-22 CVE-2022-35408 Unspecified vulnerability in Insyde Insydeh2O
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.
local
low complexity
insyde
8.2
2022-09-22 CVE-2022-35896 Improper Input Validation vulnerability in Insyde Insydeh2O
An issue SMM memory leak vulnerability in SMM driver (SMRAM was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.
local
low complexity
insyde CWE-20
6.0
2022-09-21 CVE-2022-35895 Out-of-bounds Write vulnerability in Insyde Insydeh2O
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.
local
low complexity
insyde CWE-787
8.2