https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 23:49:44 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-204878 EUVD-2026-204878 https://cve.radiocsirt.org/vuln/euvd-2026-204878 https://cve.radiocsirt.org/vuln/fkie_cve-2024-39707 <p>Insyde IHISI function 0x49 can restore factory defaults for certain UEFI variables without further authentication by default, which could lead to a possible roll-back attack in certain platforms. This is fixed in: kernel 5.2, version 05.29.19; kernel 5.3, version 05.38.19; kernel 5.4, version 05.46.19; kernel 5.5, version 05.54.19; kernel 5.6, version 05.61.19.</p> <p>Insyde IHISI function 0x49 can restore factory defaults for certain UEFI variables without further authentication by default, which could lead to a possible roll-back attack in certain platforms. This is fixed in: kernel 5.2, version 05.29.19; kernel 5.3, version 05.38.19; kernel 5.4, version 05.46.19; kernel 5.5, version 05.54.19; kernel 5.6, version 05.61.19.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-39707 https://cve.radiocsirt.org/vuln/ghsa-g772-w9v5-7985 <p>Insyde IHISI function 0x49 can restore factory defaults for certain UEFI variables without further authentication by default, which could lead to a possible roll-back attack in certain platforms. This is fixed in: kernel 5.2, version 05.29.19; kernel 5.3, version 05.38.19; kernel 5.4, version 05.46.19; kernel 5.5, version 05.54.19; kernel 5.6, version 05.61.19.</p> <p>Insyde IHISI function 0x49 can restore factory defaults for certain UEFI variables without further authentication by default, which could lead to a possible roll-back attack in certain platforms. This is fixed in: kernel 5.2, version 05.29.19; kernel 5.3, version 05.38.19; kernel 5.4, version 05.46.19; kernel 5.5, version 05.54.19; kernel 5.6, version 05.61.19.</p> https://cve.radiocsirt.org/vuln/ghsa-g772-w9v5-7985 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3419 <p>Ein lokaler Angreifer kann eine Schwachstelle in Insyde UEFI Firmware ausnutzen, um Dateien zu manipulieren.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Insyde UEFI Firmware ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3419