CVE-2025-10451: Insyde Software INSYDEH2O

High severity, CVSS 8.2. EPSS: 0.1% chance of exploitation in the next 30 days.

Unchecked output buffer may allowed arbitrary code execution in SMM and potentially result in SMM memory corruption.

Affected products

• Insyde Software INSYDEH2O

Published 2025-12-12. Last modified 2026-10-07.