Skip to content
OpenAdvisories

Vendor

Insyde Software

23 known vulnerabilities.

Products

InsydeH2O 18 InsydeH2O tools 4 InsydeH2O, InsydeH2O ARM 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2025-4275 Public exploit

    SecureFlashDxe: Incorrect UEFI variable attributes check allows usage of invalid certificate

    A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated NVRAM variable. An attacker may to execute arbitrary signed …

    Insyde Software InsydeH2O