Lucene search
K

22 matches found

CNNVD
CNNVD
added 2026/01/14 12:0 a.m.2 views

Insyde InsydeH2O 安全漏洞

Insyde InsydeH2O is a new EFI/UEFI specification from Insyde, China. It is intended to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in Insyde InsydeH2O, which stems from a buffer overflow that can be caused by untrusted user-mode applications when readin...

7.8CVSS7.2AI score0.00025EPSS
Exploits0References1
Fedora
Fedora
added 2024/06/11 1:51 a.m.20 views

[SECURITY] Fedora 40 Update: efifs-1.9-6.fc40

Free software EFI/UEFI standalone file system drivers, based on the GRUB 2.0 read-only drivers: AFFS Amiga Fast FileSystem, BFS BeOS FileSystem, btrfs, exFAT, ext2/ext3/ext4, F2FS experimental, HFS and HFS+ Mac OS, including the compression support, ISO9660, JFS Journaled FileSystem, nilfs2, NTFS...

6CVSS6AI score0.00033EPSS
Exploits0
CNNVD
CNNVD
added 2023/11/01 12:0 a.m.1 views

Insyde InsydeH2O Security Breach

Insyde InsydeH2O is a C-language source from Insyde Corporation of Taiwan, which implements the new technology "EFI/UEFI" specification designed to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in Insyde InsydeH2O with kernel versions 5.0 through 5.5, whi...

9.8CVSS7.9AI score0.00254EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/08/03 12:0 a.m.3 views

Insyde InsydeH2O Security Breach

Insyde InsydeH2O is a C-language source from Insyde Corporation of Taiwan that implements the new technology "EFI/UEFI" specification, designed to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in Insyde InsydeH2O, which stems from the FvbServicesRuntimeDx...

6.5CVSS6.7AI score0.00051EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/02/15 12:0 a.m.3 views

Insyde InsydeH2O 安全漏洞

Insyde InsydeH2O is a C source from Insyde Corporation of Taiwan, which implements the new technology "EFI/UEFI" specification, designed to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in Insyde InsydeH2O with kernel versions 5.0 through 5.5. An attacker...

7CVSS7.1AI score0.00091EPSS
Exploits0References2
CNVD
CNVD
added 2022/11/24 12:0 a.m.25 views

Insyde InsydeH2O Buffer Overflow Vulnerability

Insyde InsydeH2O is a C language source from Insyde Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the traditional BIOS Basic Input/Output System. Insyde A buffer overflow vulnerability exists in InsydeH2O 5.0 and later, 5.5 and earlier versions,...

7.8CVSS8AI score0.00159EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/11/14 12:0 a.m.2 views

Insyde InsydeH2O 安全漏洞

Insyde InsydeH2O is a C source from Insyde Corporation, Taiwan, which implements the new technology "EFI/UEFI" specification designed to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in Insyde InsydeH2O NvmExpressLegacy, which originates from the SMI...

7CVSS7.2AI score0.00038EPSS
Exploits0References4
CNVD
CNVD
added 2022/09/28 12:0 a.m.32 views

Insyde InsydeH2O Elevation of Privilege Vulnerability

Insyde InsydeH2O is a C language source from Insyde Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the traditional BIOS Basic Input/Output System. Insyde An elevation of privilege vulnerability exists in InsydeH2O, which stems from an SMM memory...

8.2CVSS8.4AI score0.00209EPSS
Exploits0References1
CNVD
CNVD
added 2022/02/09 12:0 a.m.19 views

Insyde InsydeH2O Buffer Overflow Vulnerability (CNVD-2022-10273)

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System. Operating System H2O UEFI firmware has a buffer overflow vulnerability that can be exploited to write fixed...

7.5CVSS3.6AI score0.00106EPSS
Exploits0References1
CNVD
CNVD
added 2022/02/09 12:0 a.m.28 views

Insyde InsydeH2O Buffer Overflow Vulnerability (CNVD-2022-10275)

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System. Operating System H2O UEFI firmware has a buffer overflow vulnerability that can be exploited to write fixed...

7.5CVSS3.6AI score0.00066EPSS
Exploits0References1
CNVD
CNVD
added 2022/02/09 12:0 a.m.22 views

Insyde InsydeH2O permission permission and access control issues vulnerability (CNVD-2022-10274)

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the traditional BIOS Basic Input/Output System. Operating System H2O UEFI firmware is vulnerable to permission and access control issues, which can be...

8.2CVSS2.1AI score0.00194EPSS
Exploits0References1
CNVD
CNVD
added 2022/02/09 12:0 a.m.15 views

Insyde InsydeH2O has an unspecified vulnerability (CNVD-2022-10279)

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the traditional BIOS Basic Input/Output System. Operating System H2O UEFI firmware contains a security vulnerability that can be exploited by attacker...

8.2CVSS5.4AI score0.00057EPSS
Exploits0References1
CNVD
CNVD
added 2022/02/08 12:0 a.m.24 views

Insyde InsydeH2O has an unspecified vulnerability (CNVD-2022-10282)

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System. The vulnerability can be exploited to read or write to or manipulate data in SMRAM, resulting in an...

8.2CVSS2AI score0.00055EPSS
Exploits0References1
CNVD
CNVD
added 2022/02/08 12:0 a.m.29 views

Insyde InsydeH2O has an unspecified vulnerability (CNVD-2022-10288)

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System.A security vulnerability exists in Insyde InsydeH2O. The vulnerability stems from the System Management...

7.5CVSS1.3AI score0.00066EPSS
Exploits0References1
CNVD
CNVD
added 2022/02/08 12:0 a.m.29 views

Insyde InsydeH2O Buffer Overflow Vulnerability (CNVD-2022-10285)

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System. Operating System H2O UEFI firmware suffers from a buffer overflow vulnerability that stems from the SWSMI...

8.2CVSS2.6AI score0.00103EPSS
Exploits0References1
CNVD
CNVD
added 2022/02/08 12:0 a.m.17 views

Insyde InsydeH2O has an unspecified vulnerability (CNVD-2022-10284)

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the traditional BIOS Basic Input/Output System. Operating System H2O UEFI firmware has a security vulnerability that could be exploited to elevate...

8.2CVSS2.9AI score0.00057EPSS
Exploits0References1
CNVD
CNVD
added 2022/02/08 12:0 a.m.21 views

Insyde InsydeH2O has an unspecified vulnerability (CNVD-2022-10283)

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System. The vulnerability can be exploited to read or write or manipulate data to SMRAM, resulting in an escalation...

8.2CVSS2AI score0.00063EPSS
Exploits0References1
CNVD
CNVD
added 2022/02/08 12:0 a.m.28 views

Insyde InsydeH2O permission permission and access control issues vulnerability

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the traditional BIOS Basic Input/Output System. The vulnerability could be exploited to hijack the execution flow of code running in system...

8.2CVSS2.5AI score0.00131EPSS
Exploits0References1
CNVD
CNVD
added 2022/01/10 12:0 a.m.19 views

Insyde InsydeH2O has an unspecified vulnerability

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System. The vulnerability stems from a lack of shared memory monitoring of SMI handles. No detailed vulnerability...

9.8CVSS2.4AI score0.01216EPSS
Exploits0References1
CNVD
CNVD
added 2022/01/07 12:0 a.m.17 views

Insyde InsydeH2O has an unspecified vulnerability (CNVD-2022-10289)

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System. No details of the vulnerability are currently available...

7.5CVSS3AI score0.00281EPSS
Exploits0References1
Rows per page
Query Builder