<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 27 Oct 2026 07:53:56 +0000</lastBuildDate>
    <item>
      <title>cnvd-2022-86312</title>
      <link>https://cve.radiocsirt.org/vuln/cnvd-2022-86312</link>
      <description>cnvd-2022-86312</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cnvd-2022-86312</guid>
    </item>
    <item>
      <title>EUVD-2026-235657</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-235657</link>
      <description>EUVD-2026-235657</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-235657</guid>
    </item>
    <item>
      <title>fkie_cve-2022-35407</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2022-35407</link>
      <description>&lt;p&gt;An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow leads to arbitrary code execution in the SetupUtility driver on Intel platforms. An attacker can change the values of certain UEFI variables. If the size of the second variable exceeds the size of the first, then the buffer will be overwritten. This issue affects the SetupUtility driver of InsydeH2O.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow leads to arbitrary code execution in the SetupUtility driver on Intel platforms. An attacker can change the values of certain UEFI variables. If the size of the second variable exceeds the size of the first, then the buffer will be overwritten. This issue affects the SetupUtility driver of InsydeH2O.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2022-35407</guid>
    </item>
    <item>
      <title>GHSA-mm4m-cr9x-9m5h</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-mm4m-cr9x-9m5h</link>
      <description>&lt;p&gt;An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow leads to arbitrary code execution in the SetupUtility driver on Intel platforms. An attacker can change the values of certain UEFI variables. If the size of the second variable exceeds the size of the first, then the buffer will be overwritten. This issue affects the SetupUtility driver of InsydeH2O.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow leads to arbitrary code execution in the SetupUtility driver on Intel platforms. An attacker can change the values of certain UEFI variables. If the size of the second variable exceeds the size of the first, then the buffer will be overwritten. This issue affects the SetupUtility driver of InsydeH2O.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-mm4m-cr9x-9m5h</guid>
    </item>
    <item>
      <title>gsd-2022-35407</title>
      <link>https://cve.radiocsirt.org/vuln/gsd-2022-35407</link>
      <description>gsd-2022-35407</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/gsd-2022-35407</guid>
    </item>
    <item>
      <title>WID-SEC-W-2025-2412 — ARM-basierte HP-Computer mit InsydeH2O-UEFI-Firmware: Schwachstelle ermöglicht Codeausführung</title>
      <link>https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2412</link>
      <description>&lt;p&gt;Ein lokaler Angreifer kann eine Schwachstelle in der InsydeH2O-UEFI-Firmware ausnutzen, die in bestimmten ARM-basierten HP-Computern verwendet wird, um beliebigen Code auszuführen.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein lokaler Angreifer kann eine Schwachstelle in der InsydeH2O-UEFI-Firmware ausnutzen, die in bestimmten ARM-basierten HP-Computern verwendet wird, um beliebigen Code auszuführen.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2412</guid>
    </item>
  </channel>
</rss>
