agentprime: insyde-software-insydeh2oEvery new CVE for insyde-software-insydeh2o.https://agentprime.io/CVE-2026-12855: H19WMIHandlerSmm: unvalidated memory boundary could result in arbitrary code execution.https://agentprime.io/advisories/CVE-2026-12855/https://agentprime.io/advisories/CVE-2026-12855/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 03:59:11 GMTCVECVE-2026-6485: UEFI BIOS embedded Shell can be used to bypass Secure Boothttps://agentprime.io/advisories/CVE-2026-6485/https://agentprime.io/advisories/CVE-2026-6485/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 03:54:01 GMTCVECVE-2021-38489: HDD Password Stored In Plaintexthttps://agentprime.io/advisories/CVE-2021-38489/https://agentprime.io/advisories/CVE-2021-38489/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 02:25:11 GMTCVECVE-2021-43614: VariableEditSmm: Error checking of UEFI variables could cause buffer overflow, leading to code executionhttps://agentprime.io/advisories/CVE-2021-43614/https://agentprime.io/advisories/CVE-2021-43614/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 02:15:34 GMTCVECVE-2021-43613: SysPasswordDxe: Password hashes are exposed in runtime UEFI variables, leading to escalation of privilegehttps://agentprime.io/advisories/CVE-2021-43613/https://agentprime.io/advisories/CVE-2021-43613/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 02:05:35 GMTCVECVE-2026-9805: FMTSWriteUseIntelLib: FMTS SMM IHISI Buffer Overflowhttps://agentprime.io/advisories/CVE-2026-9805/https://agentprime.io/advisories/CVE-2026-9805/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Aug 2026 01:00:25 GMTCVECVE-2026-6484: Lack of verified boot to certain FV may cause arbitrary code executionhttps://agentprime.io/advisories/CVE-2026-6484/https://agentprime.io/advisories/CVE-2026-6484/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 00:20:36 GMTCVECVE-2025-10451: H19Int15CallbackSmm: SMM memory corruption vulnerability in combined DXE/SMM (SMRAM write)https://agentprime.io/advisories/CVE-2025-10451/https://agentprime.io/advisories/CVE-2025-10451/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Dec 2025 00:28:52 GMTCVECVE-2025-4410: SetupUtility: A buffer overflow vulnerability leads to arbitrary code execution.https://agentprime.io/advisories/CVE-2025-4410/https://agentprime.io/advisories/CVE-2025-4410/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Aug 2025 01:49:47 GMTCVECVE-2025-4277: Tcg2Smm: improper input validation may lead to arbitrary code executionhttps://agentprime.io/advisories/CVE-2025-4277/https://agentprime.io/advisories/CVE-2025-4277/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Aug 2025 01:46:22 GMTCVECVE-2025-4276: UsbCoreDxe: improper input validation may lead to arbitrary code executionhttps://agentprime.io/advisories/CVE-2025-4276/https://agentprime.io/advisories/CVE-2025-4276/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Aug 2025 01:41:56 GMTCVECVE-2025-4426: SetupAutomationSmm : SMRAM memory contents leak / information disclosure vulnerability in SMM modulehttps://agentprime.io/advisories/CVE-2025-4426/https://agentprime.io/advisories/CVE-2025-4426/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Jul 2025 00:46:27 GMTCVECVE-2025-4425: SetupAutomationSmm: Stack overflow vulnerability in SMI handlerhttps://agentprime.io/advisories/CVE-2025-4425/https://agentprime.io/advisories/CVE-2025-4425/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Jul 2025 00:45:32 GMTCVECVE-2025-4424: SetupAutomationSmm : Arbitrary calls to SmmSetVariable with unsanitised arguments in SMI handlerhttps://agentprime.io/advisories/CVE-2025-4424/https://agentprime.io/advisories/CVE-2025-4424/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Jul 2025 00:43:53 GMTCVECVE-2025-4423: SetupAutomationSmm:Vulnerability in the SMM module allow attacker to write arbitrary code and lead to memory corruptionhttps://agentprime.io/advisories/CVE-2025-4423/https://agentprime.io/advisories/CVE-2025-4423/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Jul 2025 00:42:01 GMTCVECVE-2025-4422: EfiSmiServices : EfiPcdProtocol, SMM memory corruption vulnerabilities in SMM modulehttps://agentprime.io/advisories/CVE-2025-4422/https://agentprime.io/advisories/CVE-2025-4422/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Jul 2025 00:40:47 GMTCVECVE-2025-4421: EfiSmiServices: gEfiSmmCpuProtocol, SMM memory corruption vulnerabilities in SMM modulehttps://agentprime.io/advisories/CVE-2025-4421/https://agentprime.io/advisories/CVE-2025-4421/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Jul 2025 00:39:28 GMTCVECVE-2025-4275: SecureFlashDxe: Incorrect UEFI variable attributes check allows usage of invalid certificatehttps://agentprime.io/advisories/CVE-2025-4275/https://agentprime.io/advisories/CVE-2025-4275/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Jun 2025 00:25:17 GMTCVE