Approved changes feed: RSS · Atom

cpe:2.3:a:insyde_software:insydeh2o:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorInsyde Software (ba6a3a4a-0a8e-5b5e-b3f1-41cd2c315d43)
ProductInsydeh2O (dd7abae1-0c5d-537d-8808-98dbf384d752)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-6485 vulnerable 2026-09-16 04:34:08.492981 UEFI BIOS embedded Shell can be used to bypass Secure Boot
HIGH (8.2)
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts.
Published: 2026-09-09T03:54:01.460Z
Updated: 2026-09-10T14:30:20.224Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6484 under_investigation 2026-09-16 04:34:07.973840 Lack of verified boot to certain FV may cause arbitrary code execution
HIGH (8.2)
In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution.
Published: 2026-08-12T00:20:36.095Z
Updated: 2026-08-12T12:39:26.057Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12855 vulnerable 2026-09-16 04:32:51.318358 H19WMIHandlerSmm: unvalidated memory boundary could result in arbitrary code execution.
HIGH (8.2)
Unvalidated memory boundary could result in arbitrary code execution. The vulnerability exists in the code developed specifically for HP projects.
Published: 2026-09-09T03:59:11.348Z
Updated: 2026-10-01T15:08:22.356Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4426 vulnerable 2026-06-08 07:29:16.228463 SetupAutomationSmm : SMRAM memory contents leak / information disclosure vulnerability in SMM module
MEDIUM (6)
The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability.  https://support.lenovo.com/us/en/product_security/home
Published: 2025-07-30T00:46:27.918Z
Updated: 2025-08-14T05:55:19.842Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4425 vulnerable 2026-06-08 07:29:16.228104 SetupAutomationSmm: Stack overflow vulnerability in SMI handler
HIGH (8.2)
The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability.  https://support.lenovo.com/us/en/product_security/home
Published: 2025-07-30T00:45:32.592Z
Updated: 2025-08-14T05:56:26.016Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4424 vulnerable 2026-06-08 07:29:16.227736 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4423 vulnerable 2026-06-08 07:29:16.227485 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4422 vulnerable 2026-06-08 07:29:16.227220 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4421 vulnerable 2026-06-08 07:29:16.226946 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4410 vulnerable 2026-06-08 07:29:16.213228 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4277 vulnerable 2026-06-08 07:29:15.961127 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4276 vulnerable 2026-06-08 07:29:15.960829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4275 vulnerable 2026-06-08 07:29:15.960387 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10451 vulnerable 2026-06-08 07:02:26.898517 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.