---
title: "Insyde InsydeH2O vulnerabilities and CVEs"
url: https://radicalnotion.ai/vendor/insyde/insydeh2o
type: product
description: "Insyde InsydeH2O has 87 published CVEs, 0 in CISA KEV and 9 with public exploits."
updated: 2026-09-09
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# Insyde InsydeH2O vulnerabilities

Vendor: [Insyde](https://radicalnotion.ai/vendor/insyde)

- **Published CVEs:** 87
- **In CISA KEV:** 0
- **With a public exploit:** 9
- **With a patch:** 72
- **Average CVSS:** 7.4
- **First CVE:** 2021-06-16
- **Latest CVE:** 2026-09-09
- **Platforms:** arm, athlon gold 7220u, athlon silver 7120u, atom x7211e, atom x7213e, atom x7425e, b760, c262, c266, celeron 7300, celeron 7305, celeron 7305l, celeron g6900, celeron g6900t, core i3-12100, core i3-12100f, core i3-12100t, core i3-1210u, core i3-1215u, core i3-1215ul, core i3-1220p, core i3-12300, core i3-12300hl, core i3-12300t, core i3-1305u, core i3-13100, core i3-13100e, core i3-13100f, core i3-13100t, core i3-13100te, core i3-1315u, core i3-1315ue, core i3-1315ure, core i3-1320pe, core i3-1320pre, core i3-13300he, core i3-13300hre, core i3-n300, core i3-n305, core i5 14600k, core i5 14600kf, core i5-1230u, core i5-1235u, core i5-1235ul, core i5-12400, core i5-12400f, core i5-12400t, core i5-1240p, core i5-1240u, core i5-12450h, core i5-12450hx, core i5-1245u, core i5-1245ul, core i5-12490f, core i5-12500, core i5-12500h, core i5-12500hl, core i5-12500t, core i5-1250p, core i5-12600, core i5-12600h, core i5-12600hl, core i5-12600hx, core i5-12600k, core i5-12600kf, core i5-12600t, core i5-1334u, core i5-1335u, core i5-1335ue, core i5-13400, core i5-13400e, core i5-13400f, core i5-13400t, core i5-1340p, core i5-1340pe, core i5-13420h, core i5-13450hx, core i5-1345u, core i5-1345ue, core i5-1345ure, core i5-13500, core i5-13500e, core i5-13500h, core i5-13500hx, core i5-13500t, core i5-13500te, core i5-13505h, core i5-1350p, core i5-1350pe, core i5-1350pre, core i5-13600, core i5-13600h, core i5-13600he, core i5-13600hre, core i5-13600hx, core i5-13600k, core i5-13600kf, core i5-13600t, core i7 14700k, core i7 14700kf, core i7-1250u, core i7-1255u, core i7-1255ul, core i7-1260p, core i7-1260u, core i7-12650h, core i7-12650hx, core i7-1265u, core i7-1265ul, core i7-12700, core i7-12700f, core i7-12700h, core i7-12700hl, core i7-12700k, core i7-12700kf, core i7-12700t, core i7-1270p, core i7-12800h, core i7-12800hl, core i7-12800hx, core i7-1280p, core i7-12850hx, core i7-1355u, core i7-1360p, core i7-13620h, core i7-13650hx, core i7-1365u, core i7-1365ue, core i7-1365ure, core i7-1366ure, core i7-13700, core i7-13700e, core i7-13700f, core i7-13700h, core i7-13700hx, core i7-13700k, core i7-13700kf, core i7-13700t, core i7-13700te, core i7-13705h, core i7-1370p, core i7-1370pe, core i7-1370pre, core i7-1375pre, core i7-13800h, core i7-13800he, core i7-13800hre, core i7-13850hx, core i9-12900, core i9-12900f, core i9-12900h, core i9-12900hk, core i9-12900hx, core i9-12900k, core i9-12900kf, core i9-12900ks, core i9-12900t, core i9-12950hx, core i9-13900, core i9-13900e, core i9-13900f, core i9-13900h, core i9-13900hk, core i9-13900hx, core i9-13900k, core i9-13900kf, core i9-13900ks, core i9-13900t, core i9-13900te, core i9-13905h, core i9-13950hx, core i9-13980hx, core i9-14900k, core i9-14900kf, h770, hm770, kernel 5.2, kernel 5.3, kernel 5.4, kernel 5.5, kernel 5.6, kernel 5.7, n100, n200, n50, n95, n97, pentium 8500, pentium 8505, pentium gold g7400, pentium gold g7400t, ryzen 3 5100, ryzen 3 5125c, ryzen 3 5300g, ryzen 3 5300ge, ryzen 3 5400u, ryzen 3 5425u, ryzen 3 7320u, ryzen 3 7335u, ryzen 3 7440u, ryzen 3 pro 7330u, ryzen 5 5500, ryzen 5 5500h, ryzen 5 5500u, ryzen 5 5560u, ryzen 5 5600g, ryzen 5 5600ge, ryzen 5 5600h, ryzen 5 5600hs, ryzen 5 5600u, ryzen 5 5625u, ryzen 5 6600h, ryzen 5 6600hs, ryzen 5 6600u, ryzen 5 7500f, ryzen 5 7520u, ryzen 5 7535hs, ryzen 5 7535u, ryzen 5 7540u, ryzen 5 7545u, ryzen 5 7600, ryzen 5 7600x, ryzen 5 7640h, ryzen 5 7640u, ryzen 5 pro 7530u, ryzen 5 pro 7640hs, ryzen 5 pro 7645, ryzen 7 5700, ryzen 7 5700g, ryzen 7 5700ge, ryzen 7 5700u, ryzen 7 5800h, ryzen 7 5800hs, ryzen 7 5800u, ryzen 7 5825u, ryzen 7 6800h, ryzen 7 6800hs, ryzen 7 6800u, ryzen 7 7645hx, ryzen 7 7700, ryzen 7 7700x, ryzen 7 7735hs, ryzen 7 7735u, ryzen 7 7736u, ryzen 7 7745hx, ryzen 7 7800x3d, ryzen 7 7840h, ryzen 7 7840hx, ryzen 7 7840u, ryzen 7 pro 7730u, ryzen 7 pro 7745, ryzen 7 pro 7840hs, ryzen 9 5900hs, ryzen 9 5900hx, ryzen 9 5980hs, ryzen 9 6900hs, ryzen 9 6900hx, ryzen 9 6980hs, ryzen 9 6980hx, ryzen 9 7645hx3d, ryzen 9 7845hx, ryzen 9 7900, ryzen 9 7900x, ryzen 9 7900x3d, ryzen 9 7940h, ryzen 9 7940hs, ryzen 9 7940hx, ryzen 9 7945hx, ryzen 9 7950x, ryzen 9 7950x3d, ryzen 9 pro 7940hs, ryzen 9 pro 7945, ryzen z1, ryzen z1 extreme, ryzen3 5300u, see in the reference link, u300, u300e, v314, v3c16, v3c18, v3c44, v3c48, van gogh 0405, wm790, x86, z790

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 2 |
| High | 68 |
| Medium | 16 |
| Low | 1 |
| Unscored | 0 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-787](https://radicalnotion.ai/cwe/cwe-787) | Out-of-bounds Write | 19 |
| [CWE-367](https://radicalnotion.ai/cwe/cwe-367) | Time-of-check Time-of-use (TOCTOU) Race Condition | 14 |
| [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 12 |
| [CWE-119](https://radicalnotion.ai/cwe/cwe-119) | Improper Restriction of Operations within the Bounds of a Memory Buffer | 6 |
| [CWE-126](https://radicalnotion.ai/cwe/cwe-126) | Buffer Over-read | 3 |
| [CWE-121](https://radicalnotion.ai/cwe/cwe-121) | Stack-based Buffer Overflow | 2 |
| [CWE-120](https://radicalnotion.ai/cwe/cwe-120) | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') | 2 |
| [CWE-312](https://radicalnotion.ai/cwe/cwe-312) | Cleartext Storage of Sensitive Information | 2 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2021 | 2 |
| 2022 | 31 |
| 2023 | 28 |
| 2024 | 4 |
| 2025 | 15 |
| 2026 | 7 |

## Affected versions (top 24 of 369)

| Version | Kind | CVEs |
| --- | --- | --- |
| 5.3 \<= v \< 5.3.05.36.27 | range | 10 |
| 5.4 \<= v \< 5.4.05.44.27 | range | 10 |
| 5.5 \<= v \< 5.5.05.52.27 | range | 9 |
| 5.0 \<= v \< 5.2.05.27.27 | range | 8 |
| \>= See in the Solution | range | 6 |
| 5.1 \<= v \< 5.16.25 | range | 6 |
| 5.2 \<= v \< 5.26.25 | range | 6 |
| 5.3 \<= v \< 5.35.25 | range | 6 |
| 5.4 \<= v \< 5.43.25 | range | 6 |
| 5.0 \<= v \<= 5.5 | range | 4 |
| 5.1 \<= v \< 5.16.42 | range | 4 |
| 5.2 | range | 4 |
| 5.3.05.36.27 | patched | 10 |
| 5.4.05.44.27 | patched | 10 |
| 5.2.05.27.27 | patched | 9 |
| 5.5.05.52.27 | patched | 9 |
| 5.16.25 | patched | 6 |
| 5.26.25 | patched | 6 |
| 5.35.25 | patched | 6 |
| 5.43.25 | patched | 6 |
| L05.05.40.011803.172079 | patched | 6 |
| 5.16.42 | patched | 4 |
| 05.09.37 | patched | 3 |
| 05.27.29 | patched | 3 |

## CVEs (first 30 of 87, most severe first)

| CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2026-12855 | H19WMIHandlerSmm: unvalidated memory boundary could result in arbitrary code execution. | high | 8.2 | No | No | Yes |
| CVE-2026-6485 | UEFI BIOS embedded Shell can be used to bypass Secure Boot | high | 8.2 | No | No | Yes |
| CVE-2021-38489 | HDD Password Stored In Plaintext | high | 8.2 | No | No | Yes |
| CVE-2021-43614 | VariableEditSmm: Error checking of UEFI variables could cause buffer overflow, leading to code execution | medium | 6.7 | No | No | Yes |
| CVE-2021-43613 | SysPasswordDxe: Password hashes are exposed in runtime UEFI variables, leading to escalation of privilege | medium | 6.5 | No | No | Yes |
| CVE-2026-9805 | FMTSWriteUseIntelLib: FMTS SMM IHISI Buffer Overflow | low | 2.7 | No | No | Yes |
| CVE-2026-6484 | Lack of verified boot to certain FV may cause arbitrary code execution | high | 8.2 | No | No | Yes |
| CVE-2025-10451 | H19Int15CallbackSmm: SMM memory corruption vulnerability in combined DXE/SMM (SMRAM write) | high | 8.2 | No | No | No |
| CVE-2025-4410 | SetupUtility: A buffer overflow vulnerability leads to arbitrary code execution. | high | 7.5 | No | No | Yes |
| CVE-2025-4277 | Tcg2Smm: improper input validation may lead to arbitrary code execution | high | 7.5 | No | No | Yes |
| CVE-2025-4276 | UsbCoreDxe: improper input validation may lead to arbitrary code execution | high | 7.5 | No | No | Yes |
| CVE-2025-4426 | SetupAutomationSmm : SMRAM memory contents leak / information disclosure vulnerability in SMM module | medium | 6.0 | No | No | Yes |
| CVE-2025-4425 | SetupAutomationSmm: Stack overflow vulnerability in SMI handler | high | 8.2 | No | No | Yes |
| CVE-2025-4424 | SetupAutomationSmm : Arbitrary calls to SmmSetVariable with unsanitised arguments in SMI handler | medium | 6.0 | No | No | Yes |
| CVE-2025-4423 | SetupAutomationSmm:Vulnerability in the SMM module allow attacker to write arbitrary code and lead to memory corruption | high | 8.2 | No | No | Yes |
| CVE-2025-4422 | EfiSmiServices : EfiPcdProtocol, SMM memory corruption vulnerabilities in SMM module | high | 8.2 | No | No | Yes |
| CVE-2025-4421 | EfiSmiServices: gEfiSmmCpuProtocol, SMM memory corruption vulnerabilities in SMM module | high | 8.2 | No | No | Yes |
| CVE-2024-55567 | - | high | 7.5 | No | No | Yes |
| CVE-2025-4275 | SecureFlashDxe: Incorrect UEFI variable attributes check allows usage of invalid certificate | high | 7.8 | No | No | Yes |
| CVE-2024-52879 | - | high | 7.5 | No | No | Yes |
| CVE-2024-52878 | - | high | 7.5 | No | No | Yes |
| CVE-2024-52877 | - | high | 7.5 | No | No | Yes |
| CVE-2024-25079 | - | high | 7.4 | No | No | Yes |
| CVE-2024-27353 | - | high | 7.4 | No | No | Yes |
| CVE-2024-25078 | - | high | 7.4 | No | No | Yes |
| CVE-2022-46897 | - | medium | 5.3 | No | No | No |
| CVE-2022-24351 | - | medium | 4.7 | No | No | Yes |
| CVE-2023-40238 | - | medium | 5.5 | No | Yes | Yes |
| CVE-2023-39284 | - | medium | 5.5 | No | No | Yes |
| CVE-2023-39283 | - | high | 7.8 | No | No | No |

## Frequently asked questions

### How many CVEs does Insyde InsydeH2O have?

Insyde InsydeH2O has 87 published CVE records since 2021.

### How many Insyde InsydeH2O CVEs are in CISA KEV?

None of Insyde InsydeH2O's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Are there public exploits for Insyde InsydeH2O vulnerabilities?

Yes — 9 of Insyde InsydeH2O's CVEs have a known public exploit.

### Which versions of Insyde InsydeH2O are affected?

369 distinct Insyde InsydeH2O versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

### What are the most common weakness types in Insyde InsydeH2O CVEs?

Insyde InsydeH2O's CVEs most often map to these CWE weakness types: CWE-787 (Out-of-bounds Write), CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition), CWE-20 (Improper Input Validation), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer).

### How many critical Insyde InsydeH2O vulnerabilities are there?

Insyde InsydeH2O has 2 critical and 68 high-severity CVEs.

### What is the average severity of Insyde InsydeH2O CVEs?

The average CVSS base score across Insyde InsydeH2O's scored CVEs is 7.4.

## Other products from this vendor

- [kernel](https://radicalnotion.ai/vendor/insyde/kernel) (33 CVEs)
- [InsydeH2O tools](https://radicalnotion.ai/vendor/insyde/insydeh2o-tools) (4 CVEs)
- [h2offt](https://radicalnotion.ai/vendor/insyde/h2offt) (2 CVEs)
- [insydeh20](https://radicalnotion.ai/vendor/insyde/insydeh20) (2 CVEs)
- [h2oelv](https://radicalnotion.ai/vendor/insyde/h2oelv) (1 CVEs)
- [h2ooae](https://radicalnotion.ai/vendor/insyde/h2ooae) (1 CVEs)
- [h2opcm](https://radicalnotion.ai/vendor/insyde/h2opcm) (1 CVEs)
- [h2osde](https://radicalnotion.ai/vendor/insyde/h2osde) (1 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/insyde/insydeh2o). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.