Known vulnerabilities in InsydeH2O Kernel
Vendor:
Insyde Software
Software:
InsydeH2O Kernel
Software CPE:
cpe:2.3:h:insyde_software:insyde_kernel:*:*:*:*:*:*:*:*
Website:
https://www.insyde.com/
Total vulnerabilities:
24
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
5.7 05.71.31
5.6 05.62.31
5.5 05.55.31
5.4 05.47.31
5.3 05.39.31
5.2 05.2A.31
5.5 05.51.25
5.4 05.43.25
5.3 05.35.25
5.2 05.26.25
5.1 05.16.25
5.2 05.25.44
5.3 05.34.44
5.4 05.42.44
5.6 05.60.47
5.5 05.53.47
5.4 05.45.47
5.3 05.37.47
5.2 05.28.47
5.6 05.60.17
5.5 05.53.17
5.4 05.45.17
5.3 05.37.17
5.4 05.43.01.0026
5.4 05.43.12.0057
5.4 05.42.52.0027
5.4 05.44.34.0053
5.4 05.44.45.0015
5.4 05.45.02.0028
5.5 05.52.37
5.4 05.44.37
5.3 05.36.29
5.2 05.27.29
5.1 05.17.37
5.0 05.09.37
5.5 05.52.38
5.4 05.44.38
5.3 05.36.38
5.2 05.27.38
5.1 05.17.42
5.0 05.09.42
5.5 05.52.29
5.4 05.44.29
5.5 05.52.45
5.4 05.44.45
5.3 05.36.37
5.2 05.27.37
5.5 05.52.33
5.4 05.44.33
5.3 05.36.33
5.2 05.27.33
5.5 05.52.30
5.4 05.44.30
5.3 05.36.30
5.2 05.27.30
5.1 05.17.43
5.0 05.09.41
5.0 05.09.21
5.5 05.52.21
5.4 05.44.21
5.3 05.36.21
5.2 05.27.21
5.1 05.17.21
5.0 5.09.21
5.5 05.52.27
5.4 05.44.27
5.3 05.36.27
5.2 05.27.27
Vulnerabilities (24)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU113731 - Uncaught Exception CVE-2025-3770 |
CWE-248 | Low | 5.2 05.2A.31, 5.3 05.39.31, 5.4 05.47.31, 5.5 05.55.31, 5.6 05.62.31, 5.7 05.71.31 | 07.08.2025 |
SB2025080722 SB20250908112 SB2025092259 and 9 more |
||
| #VU110699 - Exposed Dangerous Method or Function CVE-2025-4275 |
CWE-749 | Low | - | 10.06.2025 |
SB2025061060 SB2025061304 |
||
| #VU83973 - Improper input validation CVE-2023-40238 |
CWE-20 | Low | 5.2 05.28.47, 5.3 05.37.47, 5.4 05.45.47, 5.5 05.53.47, 5.6 05.60.47 | 07.12.2023 |
SB2023120718 SB2023120689 |
||
| #VU81907 - Security Features CVE-2023-30633 |
CWE-254 | Low | 5.3 05.37.17, 5.4 05.45.17, 5.5 05.53.17, 5.6 05.60.17 | 11.10.2023 |
SB2023101162 SB2023120110 |
||
| #VU80876 - Improper input validation CVE-2023-27373 |
CWE-20 | Low | 5.4 05.42.52.0027, 5.4 05.43.01.0026, 5.4 05.43.12.0057, 5.4 05.44.34.0053, 5.4 05.44.45.0015, 5.4 05.45.02.0028 | 19.09.2023 |
SB2023080751 SB2023091913 |
||
| #VU80875 - Improper Control of Generation of Code ('Code Injection') CVE-2022-36338 |
CWE-94 | Low | 5.0 05.09.37, 5.1 05.17.37, 5.2 05.27.30, 5.2 05.27.37, 5.3 05.36.30, 5.3 05.36.37, 5.4 05.44.30, 5.4 05.44.37, 5.5 05.52.30, 5.5 05.52.37 | 19.09.2023 |
SB2022092358 SB2023091913 |
||
| #VU80873 - Missing release of memory after effective lifetime CVE-2022-35896 |
CWE-401 | Low | 5.0 05.09.37, 5.1 05.17.37, 5.2 05.27.29, 5.3 05.36.29, 5.4 05.44.29, 5.5 05.52.29 | 19.09.2023 |
SB2023091908 SB2023091913 |
||
| #VU80872 - Out-of-bounds write CVE-2022-35895 |
CWE-787 | Low | 5.0 05.09.37, 5.1 05.17.37, 5.2 05.27.29, 5.3 05.36.29, 5.4 05.44.29, 5.5 05.52.29 | 19.09.2023 |
SB2023091908 SB2023091913 |
||
| #VU80871 - Missing release of memory after effective lifetime CVE-2022-35894 |
CWE-401 | Low | 5.0 05.09.37, 5.1 05.17.37, 5.2 05.27.29, 5.3 05.36.29, 5.4 05.44.29, 5.5 05.52.29 | 19.09.2023 |
SB2023091908 SB2023091913 |
||
| #VU80868 - Memory corruption CVE-2022-35893 |
CWE-119 | Low | 5.0 05.09.37, 5.1 05.17.37, 5.2 05.27.29, 5.3 05.36.29, 5.4 05.44.29, 5.5 05.52.29 | 18.09.2023 |
SB2022092357 SB2023091913 |
||
| #VU80866 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2022-32954 |
CWE-367 | Low | 5.0 05.09.42, 5.1 05.17.42, 5.2 05.27.38, 5.3 05.36.38, 5.4 05.44.38, 5.5 05.52.38 | 18.09.2023 |
SB2023021597 SB2023091913 |
||
| #VU80864 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2022-32953 |
CWE-367 | Low | 5.0 05.09.42, 5.1 05.17.42, 5.2 05.27.38, 5.3 05.36.38, 5.4 05.44.38, 5.5 05.52.38 | 18.09.2023 |
SB2023021596 SB2023091913 |
||
| #VU80862 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2022-32477 |
CWE-367 | Low | 5.2 05.27.27, 5.3 05.36.27, 5.4 05.44.27, 5.5 05.52.27 | 18.09.2023 |
SB2023021595 SB2023091913 |
||
| #VU80861 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2022-32475 |
CWE-367 | Low | 5.2 05.27.33, 5.3 05.36.33, 5.4 05.44.29, 5.5 05.52.29 | 18.09.2023 |
SB2023021594 SB2023091913 |
||
| #VU80860 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2022-32471 |
CWE-367 | Low | 5.2 05.27.37, 5.3 05.36.37, 5.4 05.44.45, 5.5 05.52.45 | 18.09.2023 |
SB2023021593 SB2023091913 |
||
| #VU80859 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2022-32469 |
CWE-367 | Low | 5.2 05.27.33, 5.3 05.36.33, 5.4 05.44.33, 5.5 05.52.33 | 18.09.2023 |
SB2023021592 SB2023091913 |
||
| #VU80858 - Out-of-bounds write CVE-2022-30772 |
CWE-787 | Low | 5.0 05.09.41, 5.1 05.17.43, 5.2 05.27.30, 5.3 05.36.30, 5.4 05.44.30, 5.5 05.52.30 | 18.09.2023 |
SB20221115112 SB2023091913 |
||
| #VU80857 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2022-32470 |
CWE-367 | Low | 5.2 05.27.27, 5.3 05.36.27, 5.4 05.44.27, 5.5 05.52.27 | 18.09.2023 |
SB2023021591 SB2023091913 |
||
| #VU80854 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2022-30283 |
CWE-367 | Low | 5.0 5.09.21, 5.1 05.17.21, 5.2 05.27.21, 5.3 05.36.21, 5.4 05.44.21, 5.5 05.52.21 | 18.09.2023 |
SB20221115111 SB2023091913 |
||
| #VU80853 - Memory corruption CVE-2022-29275 |
CWE-119 | Low | 5.0 05.09.21, 5.1 05.17.21, 5.2 05.27.21, 5.3 05.36.21, 5.4 05.44.21, 5.5 05.52.21 | 18.09.2023 |
SB20221115110 SB2023091913 |
Showing elements 1 - 20 out of 24