{"schema_version":1,"title":"InsydeH2O vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 7 vulnerabilities in InsydeH2O: 0 in the last 7 days and 7 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-6485, was published on 9 September 2026.","url":"https://junglewise.ai/threats/technologies/insydeh2o","json_url":"https://junglewise.ai/threats/technologies/insydeh2o.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/insydeh2o","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":4,"all_time":7,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":5,"last_90_days":7,"last_365_days":7},"latest":[{"cve":"CVE-2026-6485","cvss":8.2,"epss":0.0018,"slug":"cve-2026-6485-insyde-insydeh2o-secure-boot-bypass-via-embedded-shell","title":"Insyde InsydeH2O Secure Boot bypass via embedded shell","severity":"high","exploited":false,"published_at":"2026-09-09T04:19:36.437+00:00","url":"https://junglewise.ai/threats/cve-2026-6485-insyde-insydeh2o-secure-boot-bypass-via-embedded-shell"},{"cve":"CVE-2026-12855","cvss":8.2,"epss":0.0013,"slug":"cve-2026-12855-insyde-insydeh2o-memory-boundary-validation-vulnerability","title":"Insyde InsydeH2O memory boundary validation vulnerability","severity":"high","exploited":false,"published_at":"2026-09-09T04:17:56.48+00:00","url":"https://junglewise.ai/threats/cve-2026-12855-insyde-insydeh2o-memory-boundary-validation-vulnerability"},{"cve":"CVE-2021-43614","cvss":6.7,"epss":0.0011,"slug":"cve-2021-43614-insyde-insydeh2o-buffer-overflow-in-platformlangcodes-uefi","title":"Insyde InsydeH2O buffer overflow in PlatformLangCodes UEFI variable handling","severity":"medium","exploited":false,"published_at":"2026-09-03T13:04:12.283+00:00","url":"https://junglewise.ai/threats/cve-2021-43614-insyde-insydeh2o-buffer-overflow-in-platformlangcodes-uefi"},{"cve":"CVE-2021-43613","cvss":6.5,"epss":0.0009,"slug":"cve-2021-43613-insyde-insydeh2o-password-hash-exposure-in-syspassworddxe","title":"Insyde InsydeH2O password hash exposure in SysPasswordDxe","severity":"medium","exploited":false,"published_at":"2026-09-03T13:04:12.157+00:00","url":"https://junglewise.ai/threats/cve-2021-43613-insyde-insydeh2o-password-hash-exposure-in-syspassworddxe"},{"cve":"CVE-2021-38489","cvss":8.2,"epss":0.0012,"slug":"cve-2021-38489-insyde-insydeh2o-plaintext-hdd-password-storage-in-uefi-variable","title":"Insyde InsydeH2O plaintext HDD password storage in UEFI variable","severity":"high","exploited":false,"published_at":"2026-09-03T13:04:10.943+00:00","url":"https://junglewise.ai/threats/cve-2021-38489-insyde-insydeh2o-plaintext-hdd-password-storage-in-uefi-variable"},{"cve":"CVE-2026-9805","cvss":2.7,"epss":0.0013,"slug":"cve-2026-9805-insyde-insydeh2o-buffer-overflow-in-smm-ihisi-fmtswriteuseintellib","title":"Insyde InsydeH2O buffer overflow in SMM IHISI FMTSWriteUseIntelLib","severity":"low","exploited":false,"published_at":"2026-08-26T05:18:28.547+00:00","url":"https://junglewise.ai/threats/cve-2026-9805-insyde-insydeh2o-buffer-overflow-in-smm-ihisi-fmtswriteuseintellib"},{"cve":"CVE-2026-6484","cvss":8.2,"epss":0.0037,"slug":"cve-2026-6484-insyde-insydeh2o-uefi-verified-boot-bypass","title":"Insyde InsydeH2O UEFI verified boot bypass","severity":"high","exploited":false,"published_at":"2026-08-12T01:17:08.06+00:00","url":"https://junglewise.ai/threats/cve-2026-6484-insyde-insydeh2o-uefi-verified-boot-bypass"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"InsydeH2O","slug":"insydeh2o","vendor":{"name":"Insyde","slug":"insyde","url":"https://junglewise.ai/threats/vendors/insyde"},"aliases":[],"category":"firmware","url":"https://junglewise.ai/threats/technologies/insydeh2o"},"most_severe":[{"cve":"CVE-2026-6484","cvss":8.2,"epss":0.0037,"slug":"cve-2026-6484-insyde-insydeh2o-uefi-verified-boot-bypass","title":"Insyde InsydeH2O UEFI verified boot bypass","severity":"high","exploited":false,"published_at":"2026-08-12T01:17:08.06+00:00","url":"https://junglewise.ai/threats/cve-2026-6484-insyde-insydeh2o-uefi-verified-boot-bypass"},{"cve":"CVE-2026-6485","cvss":8.2,"epss":0.0018,"slug":"cve-2026-6485-insyde-insydeh2o-secure-boot-bypass-via-embedded-shell","title":"Insyde InsydeH2O Secure Boot bypass via embedded shell","severity":"high","exploited":false,"published_at":"2026-09-09T04:19:36.437+00:00","url":"https://junglewise.ai/threats/cve-2026-6485-insyde-insydeh2o-secure-boot-bypass-via-embedded-shell"},{"cve":"CVE-2026-12855","cvss":8.2,"epss":0.0013,"slug":"cve-2026-12855-insyde-insydeh2o-memory-boundary-validation-vulnerability","title":"Insyde InsydeH2O memory boundary validation vulnerability","severity":"high","exploited":false,"published_at":"2026-09-09T04:17:56.48+00:00","url":"https://junglewise.ai/threats/cve-2026-12855-insyde-insydeh2o-memory-boundary-validation-vulnerability"},{"cve":"CVE-2021-38489","cvss":8.2,"epss":0.0012,"slug":"cve-2021-38489-insyde-insydeh2o-plaintext-hdd-password-storage-in-uefi-variable","title":"Insyde InsydeH2O plaintext HDD password storage in UEFI variable","severity":"high","exploited":false,"published_at":"2026-09-03T13:04:10.943+00:00","url":"https://junglewise.ai/threats/cve-2021-38489-insyde-insydeh2o-plaintext-hdd-password-storage-in-uefi-variable"},{"cve":"CVE-2021-43614","cvss":6.7,"epss":0.0011,"slug":"cve-2021-43614-insyde-insydeh2o-buffer-overflow-in-platformlangcodes-uefi","title":"Insyde InsydeH2O buffer overflow in PlatformLangCodes UEFI variable handling","severity":"medium","exploited":false,"published_at":"2026-09-03T13:04:12.283+00:00","url":"https://junglewise.ai/threats/cve-2021-43614-insyde-insydeh2o-buffer-overflow-in-platformlangcodes-uefi"},{"cve":"CVE-2021-43613","cvss":6.5,"epss":0.0009,"slug":"cve-2021-43613-insyde-insydeh2o-password-hash-exposure-in-syspassworddxe","title":"Insyde InsydeH2O password hash exposure in SysPasswordDxe","severity":"medium","exploited":false,"published_at":"2026-09-03T13:04:12.157+00:00","url":"https://junglewise.ai/threats/cve-2021-43613-insyde-insydeh2o-password-hash-exposure-in-syspassworddxe"},{"cve":"CVE-2026-9805","cvss":2.7,"epss":0.0013,"slug":"cve-2026-9805-insyde-insydeh2o-buffer-overflow-in-smm-ihisi-fmtswriteuseintellib","title":"Insyde InsydeH2O buffer overflow in SMM IHISI FMTSWriteUseIntelLib","severity":"low","exploited":false,"published_at":"2026-08-26T05:18:28.547+00:00","url":"https://junglewise.ai/threats/cve-2026-9805-insyde-insydeh2o-buffer-overflow-in-smm-ihisi-fmtswriteuseintellib"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}