Philips vulnerabilities
88 published CVEs name Philips among the affected products.
- Published CVEs
- 88
- Last 12 months
- 8
- Critical
- 8
- Known exploited
- 0
Critical 8High 36Medium 33Low 11Not scored 0
CVEs per yearBy the year they were published
- 201831
- 20192
- 202020
- 20219
- 202211
- 20231
- 20241
- 20255
- 20268
Newest CVEs
- CVE-2026-3562
Philips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability
Philips · Hue Bridge
Medium6.3 - CVE-2026-3561
Philips Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability
Philips · Hue Bridge
High8.0 - CVE-2026-3560
Philips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerability
Philips · Hue Bridge
High8.8 - CVE-2026-3559
Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability
Philips · Hue Bridge
High8.1 - CVE-2026-3558
Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability
Philips · Hue Bridge
High8.1 - CVE-2026-3557
Philips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Philips · Hue Bridge
High8.0 - CVE-2026-3556
Philips Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerability
Philips · Hue Bridge
High8.8 - CVE-2026-3555
Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability
Philips · Hue Bridge
High8.0 - CVE-2025-3426
Use of default hardcoded credentials
Philips · IntelliSpace Portal
High7.2 - CVE-2025-3425
Unauthenticated Remote Code Execution via .NET Deserialization
Philips · IntelliSpace Portal
High7.3
Products with the most CVEs
Most common weaknesses
- CWE-20 Improper input validation6
- CWE-798 Hard-coded credentials6
- CWE-122 Heap-based buffer overflow5
- CWE-287 Improper authentication5
- CWE-310 4
- CWE-295 Improper certificate validation3
- CWE-319 Cleartext transmission of sensitive information3
- CWE-327 3
- CWE-668 Exposure of a resource to the wrong sphere3
- CWE-79 Cross-site scripting (XSS)3