CVE-2021-42113

HIGH Year: 2021
CVSS v3 Score
8.2
High
CVSS v2 Score
4.6
Medium
Weakness Type
NVD-CWE-Other
View all →

Vulnerability Description

An issue was discovered in StorageSecurityCommandDxe in Insyde InsydeH2O with Kernel 5.1 before 05.14.28, Kernel 5.2 before 05.24.28, and Kernel 5.3 before 05.32.25. An SMM callout vulnerability allows an attacker to hijack execution flow of code running in System Management Mode. Exploiting this issue could lead to escalating privileges to SMM.

Related Vulnerabilities

CVE-2016-3436

HIGH
CVSS:8.2(High)

Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via...

NVD-CWE-Other2016

CVE-2016-3437

HIGH
CVSS:8.2(High)

Unspecified vulnerability in the Oracle CRM Wireless component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Person Address P...

NVD-CWE-Other2016

CVE-2016-3438

HIGH
CVSS:8.2(High)

Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1, and 12.2 allows remote attackers to affect confidentiality and integrity via vectors ...

NVD-CWE-Other2016

CVE-2016-3439

HIGH
CVSS:8.2(High)

Unspecified vulnerability in the Oracle CRM Wireless component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Call Phone Numbe...

NVD-CWE-Other2016

CVE-2016-3456

HIGH
CVSS:8.2(High)

Unspecified vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul component in Oracle Supply Chain Products Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confident...

NVD-CWE-Other2016

CVE-2016-3491

HIGH
CVSS:8.2(High)

Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Wire...

NVD-CWE-Other2016