Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-8810

HDD Password leakage vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Insyde

Description

On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Insyde Software InsydeH2O, InsydeH2O ARM

Default version status: unaffected

  • Kernel 5.6 to < 05.63.21affected
  • Kernel 5.7 to < 05.72.21affected

References