https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-55567.htmlhttps://patchthecve.com/cve/CVE-2024-55567.htmlWed, 17 Jun 2026 08:11:15 +0000HIGH 7.5: Improper input validation was discovered in UsbCoreDxe in Insyde InsydeH2O kernel 5.4 before 05.47.01, 5.5 before 05.55.01, 5.6 before 05.62.01, and 5.7 before 05.71.01. The SMM module has an SMM call out vulnerability which can be used to write arbitrary memory inside SMRAM and execute arbitrary cohttps://patchthecve.com/cve/CVE-2024-52880.htmlhttps://patchthecve.com/cve/CVE-2024-52880.htmlWed, 17 Jun 2026 08:07:47 +0000HIGH 7.9: An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5.5 before version 05.54.50, kernel 5.6 before version 05.61.50, and kernel 5.7 before version 05.70.50. In VariableRuntimeDxe driver, Securehttps://patchthecve.com/cve/CVE-2024-52879.htmlhttps://patchthecve.com/cve/CVE-2024-52879.htmlWed, 17 Jun 2026 08:07:47 +0000HIGH 7.5: An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5.5 before version 05.54.50, kernel 5.6 before version 05.61.50, and kernel 5.7 before version 05.70.50. In VariableRuntimeDxe driver, SmmUpdhttps://patchthecve.com/cve/CVE-2024-52878.htmlhttps://patchthecve.com/cve/CVE-2024-52878.htmlWed, 17 Jun 2026 08:07:47 +0000HIGH 7.5: An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5.5 before version 05.54.50, kernel 5.6 before version 05.61.50, and kernel 5.7 before version 05.70.50. In VariableRuntimeDxe driver, Variabhttps://patchthecve.com/cve/CVE-2024-52877.htmlhttps://patchthecve.com/cve/CVE-2024-52877.htmlWed, 17 Jun 2026 08:07:47 +0000HIGH 7.5: An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5.5 before version 05.54.50, kernel 5.6 before version 05.61.50, and kernel 5.7 before version 05.70.50. In VariableRuntimeDxe driver, callbahttps://patchthecve.com/cve/CVE-2024-49200.htmlhttps://patchthecve.com/cve/CVE-2024-49200.htmlWed, 17 Jun 2026 07:59:30 +0000MEDIUM 6.4: An issue was discovered in AcpiS3SaveDxe and ChipsetSvcDxe in Insyde InsydeH2O with kernel 5.2 though 5.7. A potential DXE memory corruption vulnerability has been identified. The root cause is use of a pointer originating from the value of an NVRAM variable as the target of a write operation. This https://patchthecve.com/cve/CVE-2023-47252.htmlhttps://patchthecve.com/cve/CVE-2023-47252.htmlWed, 17 Jun 2026 06:32:28 +0000MEDIUM 6.3: An issue was discovered in PnpSmm in Insyde InsydeH2O with kernel 5.0 through 5.6. There is a possible out-of-bounds access in the SMM communication buffer, leading to tampering. The PNP-related SMI sub-functions do not verify data size before getting it from the communication buffer, which could lehttps://patchthecve.com/cve/CVE-2022-46897.htmlhttps://patchthecve.com/cve/CVE-2022-46897.htmlWed, 17 Jun 2026 05:12:38 +0000MEDIUM 5.3: An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The CapsuleIFWUSmm driver does not check the return value from a method or function. This can prevent it from detecting unexpected states and conditions.