Insyde

Search everything

Mentions · 7d4
Mentions · 30d5
All mentions5
First seenOct 1, 2026
Last mentioned2d ago

Timeline

5 articles · newest first

EDK II UEFI flaw CVE-2026-97631 can run code before the OS

A 16-year-old PXE ICMP buffer overflow, rated 9.5, was disclosed early after AMI published a fix.

WIRED · Securityupdated 06:59 UTC · 13h agofirst Oct 28, 20:30 UTC · 2d agoVulnerability 10 sourcesCVE-2026-976311

16-year-old EDK II PXE buffer overflow runs code before Secure Boot

CVE-2026-97631 lets an adjacent-network attacker hang or hijack network boots on servers, and no stable EDK II release ships the fix yet.

The Hacker Newsupdated 06:59 UTC · 13h agofirst Oct 28, 11:50 UTC · 2d agoVulnerability 10 sourcesCVE-2026-976311

CVE-2026-97631 lets attackers run code before the OS on EDK II PXE boots

An unauthenticated ICMP sender can overflow a 504-byte field during PXE boot; AMI’s fix surfaced early and affected devices remain unclear.

Security Affairsupdated 06:59 UTC · 13h agofirst Oct 28, 11:15 UTC · 2d agoVulnerability 10 sourcesCVE-2026-976311

EDK2 UEFI bug CVE-2026-97631 enables pre-boot code execution

A 16-year-old buffer overflow in the PXE ICMP parser scores 9.5; an early AMI patch made the bug public before the planned January disclosure.

Ars Technica · Securityupdated 06:59 UTC · 13h agofirst Oct 27, 20:25 UTC · 3d agoVulnerability 10 sourcesCVE-2026-976311

VU#553437: InsydeH2O IHISI SMM is vulnerable to unsafe memory write operations

CERT warns an InsydeH2O SMM flaw in HP BIOS lets kernel attackers write arbitrary memory, including SMRAM.

CERT/CC Vulnerability NotesOct 1, 14:33 UTC · 29d agoVulnerabilityCVE-2026-128556 · 3 reads

Related CVEs

by mentions

CVE-2026-97631<1%9.5
Remote buffer overflow in EDK2 BIOS
published 8d agoEDK2PoC ×3
CVE-2026-12855<1%8.2
Memory Boundary Flaw Enables Local Code Execution in HP Project-Specific Code
published Sep 9, 2026HP project-specific code (specific affected products/lines not enumerated in the CVE data)

Appears with

TianoCorevendor · 4
EDK IIproduct · 4
AMIvendor · 4
Microsoftvendor · 4
Project Muproduct · 4
Phoenixvendor · 3
Anthropicorganization · 2
Googleorganization · 2
InsydeH2Oproduct · 1
UEFI Forumorganization · 1
Eclypsiumorganization · 1
Dragosorganization · 1
Phoenix Technologiesvendor · 1
CERT/CCorganization · 1
edk2product · 1
Debianvendor · 1

Entities are extracted by the model from each article. First seen Oct 1, 2026, last mentioned 2d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.