How many CVEs does Philips have?

Philips has 124 published CVE records since 2008, including 16 in the last two years.

How many Philips CVEs are in CISA KEV?

Yes — 2 of Philips's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which Philips products have the most CVEs?

The Philips products with the most published CVEs are IntelliSpace Portal, patient information center ix, e-alert firmware, hue bridge v2, e-Alert Unit (non-medical device).

What are the most common weakness types in Philips CVEs?

Philips's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-122 (Heap-based Buffer Overflow), CWE-798 (Use of Hard-coded Credentials), CWE-287 (Improper Authentication).

Are there public exploits for Philips vulnerabilities?

Yes — 7 of Philips's CVEs have a known public exploit.

How many critical Philips vulnerabilities are there?

Philips has 14 critical and 55 high-severity CVEs.

What is the average severity of Philips CVEs?

The average CVSS base score across Philips's scored CVEs is 7.1.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

124 CVEs

2 in CISA KEV

Philips Vulnerabilities

Name: Philips vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Philips.

124

Total CVEs

Published

2

In CISA KEV

Exploited in the wild

7

Public exploits

PoC or exploit code

7.1

Avg CVSS

2008–2026

Overview

Philips has 124 published CVE records since 2008, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 7 have a known public exploit. The average CVSS base score across scored CVEs is 7.1.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Philips products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on Philips's vulnerability posture, as a share of its 124 published CVEs.

Average CVSS: 7.1
Critical / high: 56%
Actively exploited (KEV): 2%
Public exploit available: 6%
Patch available: 42%

Severity and exploitation

How the CVSS severity of Philips's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical14

High55

Medium49

Low6

In CISA’s Known Exploited Vulnerabilities catalog

2

2 of Philips's CVEs are confirmed exploited in the wild.

Public exploits

7

7 of Philips's CVEs have a known public exploit available.

Most affected products

The Philips products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in Philips CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish Philips CVE records.

Disclosure activity by year

How many Philips CVEs were published each year.

2019

10

2020

24

2021

11

2022

12

2023

1

2024

1

2025

8

2026

8

Latest Philips CVEs

The most recently disclosed vulnerabilities affecting Philips.

Philips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability
CWE-347
High · CVSS 8.8
EPSS 0.3%2026-03-13
Philips Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability
CWE-122
High · CVSS 8.0
EPSS 0.5%2026-03-13
Philips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerability
CWE-122
High · CVSS 8.8
EPSS 0.5%2026-03-13
Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability
CWE-323
High · CVSS 8.1
EPSS 0.4%2026-03-13
Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability
CWE-306
High · CVSS 8.1
EPSS 0.4%2026-03-13
Philips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
CWE-122
High · CVSS 8.0
EPSS 0.5%2026-03-13
Philips Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerability
CWE-122
High · CVSS 8.8
EPSS 0.5%2026-03-13
Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability
CWE-122
High · CVSS 8.0
EPSS 0.4%2026-03-13
Medium vulnerability · 2025-06-02
CWE-77
Medium · CVSS 6.5
EPSS 0.3%2025-06-02
Medium vulnerability · 2025-06-02
CWE-1259
Medium · CVSS 6.5
EPSS 0.3%2025-06-02
Medium vulnerability · 2025-06-02
CWE-77
Medium · CVSS 6.5
EPSS 0.3%2025-06-02
Use of default hardcoded credentials
CWE-798
High · CVSS 7.2
EPSS 0.2%2025-04-07

Track new Philips CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor Philips CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

WSO2125 CVEs 10web125 CVEs Mambo125 CVEs Exiv2124 CVEs libming124 CVEs Xerox124 CVEs F-Secure123 CVEs getgrav123 CVEs

Browse all vendors

Frequently asked questions

Common questions about Philips vulnerabilities.

How many CVEs does Philips have?: Philips has 124 published CVE records since 2008, including 16 in the last two years.
How many Philips CVEs are in CISA KEV?: Yes — 2 of Philips's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Which Philips products have the most CVEs?: The Philips products with the most published CVEs are IntelliSpace Portal, patient information center ix, e-alert firmware, hue bridge v2, e-Alert Unit (non-medical device).
What are the most common weakness types in Philips CVEs?: Philips's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-122 (Heap-based Buffer Overflow), CWE-798 (Use of Hard-coded Credentials), CWE-287 (Improper Authentication).
Are there public exploits for Philips vulnerabilities?: Yes — 7 of Philips's CVEs have a known public exploit.
How many critical Philips vulnerabilities are there?: Philips has 14 critical and 55 high-severity CVEs.
What is the average severity of Philips CVEs?: The average CVSS base score across Philips's scored CVEs is 7.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Philips vulnerabilities

Monitor new Philips vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing