Main
Vulnerability Database
Exploits
ID:12870 - Exploit for Exposed dangerous method or function in InsydeH2O Kernel - CVE-2025-4275
ID:12870 - Exploit for Exposed dangerous method or function in InsydeH2O Kernel - CVE-2025-4275
Published: August 6, 2026
Vulnerability identifier: #VU110699
Vulnerability risk: Low
CVE-ID: CVE-2025-4275
CWE-ID: CWE-749
Exploitation vector: Local access
Vulnerable software:
InsydeH2O Kernel
Dell G15 5535
Alienware m15 R7 AMD
Alienware m17 R5 AMD
Dell G15 5525
InsydeH2O Kernel
Dell G15 5535
Alienware m15 R7 AMD
Alienware m17 R5 AMD
Dell G15 5525
Link to public exploit:
Vulnerability description
The vulnerability allows an attacker to escalate privileges on the system.
The vulnerability exists due to usage of an unprotected NVRAM variable. An attacker with physical access to the system can inject their own certificate in this variable and subsequently run arbitrary firmware (signed by the injected certificate) during the early boot process within the UEFI environment.
Remediation
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.