Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-39283 1 Insyde 2 Insydeh20, Insydeh2o 2024-11-21 7.8 High
An SMM memory corruption vulnerability in the SMM driver (SMRAM write) in CsmInt10HookSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to send arbitrary data to SMM which could lead to privilege escalation.
CVE-2023-39281 3 Amd, Insyde, Intel 280 Athlon Gold 7220u, Athlon Silver 7120u, Ryzen3 5300u and 277 more 2024-11-21 5.7 Medium
A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to run arbitrary code execution during the DXE phase.