CyberSecBulletin

Insyde Software vulnerabilities

We track 9 vulnerabilities in Insyde Software products across 2 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on January 14, 2026.

9vulnerabilities
0critical
9high
0exploited
7.9average CVSS score

Latest Insyde Software vulnerabilities

  • 7.8 High severity

    InsydeH2O tools: Out-of-bounds Write

    CVE-2025-12053Insyde Software

    The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow.

  • 7.8 High severity

    InsydeH2O tools: Out-of-bounds Write

    CVE-2025-12052Insyde Software

    The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow.

  • 7.8 High severity

    InsydeH2O tools: Out-of-bounds Write

    CVE-2025-12051Insyde Software

    The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow.

  • 7.8 High severity

    InsydeH2O tools: Out-of-bounds Write

    CVE-2025-12050Insyde Software

    The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow.

  • 7.5 High severity

    A buffer overflow vulnerability exists in the module SetupUtility.

    CVE-2025-4410Insyde Software

    A buffer overflow vulnerability exists in the module SetupUtility. An attacker with local privileged access can exploit this vulnerability by executeing arbitrary code.

  • 8.2 High severity

    InsydeH2O: Stack-based Buffer Overflow

    CVE-2025-4425Insyde Software

    The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/product_security/home

  • 8.2 High severity

    InsydeH2O: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2025-4423Insyde Software

    The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/product_security/home

  • 8.2 High severity

    InsydeH2O: Out-of-bounds Write

    CVE-2025-4422Insyde Software

    The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/product_security/home

  • 8.2 High severity

    InsydeH2O: Out-of-bounds Write

    CVE-2025-4421Insyde Software

    The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/product_security/home