Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Philips vulnerabilities

88 published CVEs name Philips among the affected products.

Published CVEs
88
Last 12 months
8
Critical
8
Known exploited
0

Critical 8High 36Medium 33Low 11Not scored 0

CVEs per yearBy the year they were published

  1. 201831
  2. 20192
  3. 202020
  4. 20219
  5. 202211
  6. 20231
  7. 20241
  8. 20255
  9. 20268

Newest CVEs

  • CVE-2026-3562

    Philips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability

    Philips · Hue Bridge

    Medium6.3
  • CVE-2026-3561

    Philips Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability

    Philips · Hue Bridge

    High8.0
  • CVE-2026-3560

    Philips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerability

    Philips · Hue Bridge

    High8.8
  • CVE-2026-3559

    Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability

    Philips · Hue Bridge

    High8.1
  • CVE-2026-3558

    Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability

    Philips · Hue Bridge

    High8.1
  • CVE-2026-3557

    Philips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    Philips · Hue Bridge

    High8.0
  • CVE-2026-3556

    Philips Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerability

    Philips · Hue Bridge

    High8.8
  • CVE-2026-3555

    Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability

    Philips · Hue Bridge

    High8.0
  • CVE-2025-3426

    Use of default hardcoded credentials

    Philips · IntelliSpace Portal

    High7.2
  • CVE-2025-3425

    Unauthenticated Remote Code Execution via .NET Deserialization

    Philips · IntelliSpace Portal

    High7.3