---
title: "Insyde vulnerabilities: CVEs, CISA KEV and security advisories"
url: https://radicalnotion.ai/vendor/insyde
type: vendor
description: "Insyde has 129 published CVEs, 0 in CISA KEV and 11 with public exploits."
updated: 2026-09-09
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# Insyde vulnerabilities

- **Published CVEs:** 129
- **In CISA KEV:** 0
- **With a public exploit:** 11
- **With a patch:** 106
- **Average CVSS:** 7.4
- **CVEs in the last two years:** 29
- **First CVE:** 2005-12-11
- **Latest CVE:** 2026-09-09

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 4 |
| High | 93 |
| Medium | 30 |
| Low | 2 |
| Unscored | 0 |

## Most affected products

| Product | CVEs |
| --- | --- |
| [InsydeH2O](https://radicalnotion.ai/vendor/insyde/insydeh2o) | 87 |
| [kernel](https://radicalnotion.ai/vendor/insyde/kernel) | 33 |
| [InsydeH2O tools](https://radicalnotion.ai/vendor/insyde/insydeh2o-tools) | 4 |
| [insydeh20](https://radicalnotion.ai/vendor/insyde/insydeh20) | 2 |
| [h2offt](https://radicalnotion.ai/vendor/insyde/h2offt) | 2 |
| [insyde bios](https://radicalnotion.ai/vendor/insyde/insyde-bios) | 1 |
| [insydecrpkg](https://radicalnotion.ai/vendor/insyde/insydecrpkg) | 1 |
| [InsydeH2O, InsydeH2O ARM](https://radicalnotion.ai/vendor/insyde/insydeh2o-insydeh2o-arm) | 1 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-787](https://radicalnotion.ai/cwe/cwe-787) | Out-of-bounds Write | 32 |
| [CWE-367](https://radicalnotion.ai/cwe/cwe-367) | Time-of-check Time-of-use (TOCTOU) Race Condition | 29 |
| [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 13 |
| [CWE-119](https://radicalnotion.ai/cwe/cwe-119) | Improper Restriction of Operations within the Bounds of a Memory Buffer | 8 |
| [CWE-121](https://radicalnotion.ai/cwe/cwe-121) | Stack-based Buffer Overflow | 3 |
| [CWE-126](https://radicalnotion.ai/cwe/cwe-126) | Buffer Over-read | 3 |
| [CWE-312](https://radicalnotion.ai/cwe/cwe-312) | Cleartext Storage of Sensitive Information | 2 |
| [CWE-124](https://radicalnotion.ai/cwe/cwe-124) | Buffer Underwrite ('Buffer Underflow') | 2 |

## Assigning CNAs

| CNA | CVEs |
| --- | --- |
| [mitre](https://radicalnotion.ai/cna/mitre) | 104 |
| [Insyde](https://radicalnotion.ai/cna/insyde) | 23 |
| [TianoCore](https://radicalnotion.ai/cna/tianocore) | 2 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2019 | 1 |
| 2020 | 0 |
| 2021 | 4 |
| 2022 | 57 |
| 2023 | 31 |
| 2024 | 6 |
| 2025 | 17 |
| 2026 | 12 |

## Latest CVEs

| CVE | Title | Severity | CVSS | EPSS | CISA KEV | Published |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2026-12855 | H19WMIHandlerSmm: unvalidated memory boundary could result in arbitrary code execution. | high | 8.2 | 0.2% | No | 2026-09-09 |
| CVE-2026-6485 | UEFI BIOS embedded Shell can be used to bypass Secure Boot | high | 8.2 | 0.2% | No | 2026-09-09 |
| CVE-2021-38489 | HDD Password Stored In Plaintext | high | 8.2 | 0.2% | No | 2026-09-03 |
| CVE-2021-43614 | VariableEditSmm: Error checking of UEFI variables could cause buffer overflow, leading to code execution | medium | 6.7 | 0.2% | No | 2026-09-03 |
| CVE-2021-43613 | SysPasswordDxe: Password hashes are exposed in runtime UEFI variables, leading to escalation of privilege | medium | 6.5 | 0.1% | No | 2026-09-03 |
| CVE-2026-9805 | FMTSWriteUseIntelLib: FMTS SMM IHISI Buffer Overflow | low | 2.7 | 0.1% | No | 2026-08-26 |
| CVE-2026-8810 | HDD Password leakage vulnerability | medium | 6.9 | 0.1% | No | 2026-08-19 |
| CVE-2026-6484 | Lack of verified boot to certain FV may cause arbitrary code execution | high | 8.2 | 0.4% | No | 2026-08-12 |
| CVE-2025-12053 | egwindrvx64.sys is potentially vulnerable to a buffer overflow | high | 7.8 | 0.2% | No | 2026-01-14 |
| CVE-2025-12052 | egwindrv.sys is potentially vulnerable to a buffer overflow. | high | 7.8 | 0.2% | No | 2026-01-14 |
| CVE-2025-12051 | H2OFFT64.sys is potentially vulnerable to a buffer overflow. | high | 7.8 | 0.2% | No | 2026-01-14 |
| CVE-2025-12050 | In H2OFFT32.sys is potentially vulnerable to a buffer overflow. | high | 7.8 | 0.2% | No | 2026-01-14 |

## Frequently asked questions

### How many CVEs does Insyde have?

Insyde has 129 published CVE records since 2005, including 29 in the last two years.

### How many Insyde CVEs are in CISA KEV?

None of Insyde's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Which Insyde products have the most CVEs?

The Insyde products with the most published CVEs are InsydeH2O, kernel, InsydeH2O tools, insydeh20, h2offt.

### What are the most common weakness types in Insyde CVEs?

Insyde's CVEs most often map to these CWE weakness types: CWE-787 (Out-of-bounds Write), CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition), CWE-20 (Improper Input Validation), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer).

### Are there public exploits for Insyde vulnerabilities?

Yes — 11 of Insyde's CVEs have a known public exploit.

### How many critical Insyde vulnerabilities are there?

Insyde has 4 critical and 93 high-severity CVEs.

### What is the average severity of Insyde CVEs?

The average CVSS base score across Insyde's scored CVEs is 7.4.

## Related vendors

- [Grokability](https://radicalnotion.ai/vendor/grokability) (131 CVEs)
- [PowerDNS](https://radicalnotion.ai/vendor/powerdns) (131 CVEs)
- [Roundcube](https://radicalnotion.ai/vendor/roundcube) (130 CVEs)
- [GE](https://radicalnotion.ai/vendor/ge) (129 CVEs)
- [GStreamer](https://radicalnotion.ai/vendor/gstreamer) (129 CVEs)
- [sco](https://radicalnotion.ai/vendor/sco) (129 CVEs)
- [LibreNMS](https://radicalnotion.ai/vendor/librenms) (128 CVEs)
- [RSA](https://radicalnotion.ai/vendor/rsa) (128 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/insyde). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.