CVE-2023-44487
- EPSS 100%
- Veröffentlicht 10.10.2023 14:15:10
- Zuletzt bearbeitet 11.08.2026 19:37:30
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-42554
- EPSS 0.33%
- Veröffentlicht 03.02.2022 02:15:07
- Zuletzt bearbeitet 11.08.2026 13:17:21
An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42, Kernel 5.4 before 05.42.51, and Kernel 5.5 before 05.50.51. An SMM memory corruption vuln...
CVE-2021-33625
- EPSS 0.32%
- Veröffentlicht 03.02.2022 02:15:06
- Zuletzt bearbeitet 11.08.2026 13:17:19
An issue was discovered in Kernel 5.x in Insyde InsydeH2O, affecting HddPassword. Software SMI services that use the Communicate() function of the EFI_SMM_COMMUNICATION_PROTOCOL do not check whether the address of the buffer is valid, which allows us...
CVE-2020-5953
- EPSS 0.28%
- Veröffentlicht 03.02.2022 01:15:07
- Zuletzt bearbeitet 11.08.2026 13:17:18
A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT (EFI_RUNTIME_SERVICES) pointer to call a GetVariable service, which is located outside of SMRAM. This...