{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-22T22:05:32.286","vulnerabilities":[{"cve":{"id":"CVE-2022-35896","sourceIdentifier":"cve@mitre.org","published":"2022-09-22T00:15:10.003","lastModified":"2025-05-05T17:18:17.600","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue SMM memory leak vulnerability in SMM driver (SMRAM was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An attacker can dump SMRAM contents via the software SMI provided by the FvbServicesRuntimeDxe driver to read the contents of SMRAM, leading to information disclosure."},{"lang":"es","value":"Se ha detectado una vulnerabilidad de pérdida de memoria en el controlador SMM (SMRAM) en InsydeH2O con el kernel versiones 5.0 hasta 5.5. Un atacante puede volcar el contenido de la SMRAM por medio del software SMI proporcionado por el controlador FvbServicesRuntimeDxe para leer el contenido de la SMRAM, conllevando a una divulgación de información"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.5,"impactScore":4.0},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.5,"impactScore":4.0}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndIncluding":"5.5","matchCriteriaId":"D301572D-C5C6-41F1-A5D2-41F07E0FC15D"}]}]}],"references":[{"url":"https://binarly.io/advisories/BRLY-2022-025/index.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.insyde.com/security-pledge","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.insyde.com/security-pledge/SA-2022034","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://binarly.io/advisories/BRLY-2022-025/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.insyde.com/security-pledge","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.insyde.com/security-pledge/SA-2022034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}