How many CVEs does phoenixtech have?

phoenixtech has 8 published CVE records since 2023, including 3 in the last two years.

How many phoenixtech CVEs are in CISA KEV?

None of phoenixtech's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which phoenixtech products have the most CVEs?

The phoenixtech products with the most published CVEs are securecore technology, winflash.

What are the most common weakness types in phoenixtech CVEs?

phoenixtech's CVEs most often map to these CWE weakness types: CWE-754 (Improper Check for Unusual or Exceptional Conditions), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-121 (Stack-based Buffer Overflow), CWE-20 (Improper Input Validation).

Are there public exploits for phoenixtech vulnerabilities?

Yes — 2 of phoenixtech's CVEs have a known public exploit.

What is the average severity of phoenixtech CVEs?

The average CVSS base score across phoenixtech's scored CVEs is 6.5.

RadicalNotion.AI

Log in Create an account

8 CVEs

phoenixtech Vulnerabilities

Name: phoenixtech vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for phoenixtech.

8

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

6.5

Avg CVSS

2023–2025

Overview

phoenixtech has 8 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

Security scorecard

A quick read on phoenixtech's vulnerability posture, as a share of its 8 published CVEs.

Average CVSS: 6.5
Critical / high: 63%
Actively exploited (KEV): 0%
Public exploit available: 25%
Patch available: 88%

Severity and exploitation

How the CVSS severity of phoenixtech's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High5

Medium2

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of phoenixtech's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2

2 of phoenixtech's CVEs have a known public exploit available.

Most affected products

The phoenixtech products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in phoenixtech CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish phoenixtech CVE records.

Phoenix8 CVEs

Disclosure activity by year

How many phoenixtech CVEs were published each year.

2023

2

2024

3

2025

3

Latest phoenixtech CVEs

The most recently disclosed vulnerabilities affecting phoenixtech.

Low vulnerability · 2025-05-13
CWE-754
Low · CVSS 3.3
EPSS 0.2%2025-05-13
Unsafe Handling of IHV UEFI Variables
CWE-754
Medium · CVSS 4.6
EPSS 0.1%2025-01-14
Unsafe Handling of Phoenix UEFI Variables
CWE-754
Medium · CVSS 4.6
EPSS 0.2%2025-01-14
Potential buffer overflow when handling UEFI variables
CWE-121
High · CVSS 7.8
EPSS 0.2%2024-05-14
Potential buffer overflow when handling UEFI variables
CWE-120
High · CVSS 7.8
EPSS 0.8%2024-05-14
WinFlash Driver Permissions Issue
CWE-732
High · CVSS 7.8
EPSS 0.4%2024-05-14
High vulnerability · 2023-12-07
CWE-20
High · CVSS 7.8
EPSS 0.3%2023-12-07
High vulnerability · 2023-11-14
CWE-284
High · CVSS 8.4
EPSS 0.2%2023-11-14

Get an alert for each new phoenixtech CVE, with AI-written analysis and remediation steps.

Monitor phoenixtech CVEs

Other vendors

CVE counts for other vendors.

microsoft42,015 CVEs linux25,264 CVEs Google17,495 CVEs Apple15,508 CVEs Oracle13,348 CVEs Debian10,234 CVEs IBM9,452 CVEs Red Hat8,588 CVEs

Browse all vendors

Frequently asked questions

Common questions about phoenixtech vulnerabilities.

How many CVEs does phoenixtech have?: phoenixtech has 8 published CVE records since 2023, including 3 in the last two years.
How many phoenixtech CVEs are in CISA KEV?: None of phoenixtech's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which phoenixtech products have the most CVEs?: The phoenixtech products with the most published CVEs are securecore technology, winflash.
What are the most common weakness types in phoenixtech CVEs?: phoenixtech's CVEs most often map to these CWE weakness types: CWE-754 (Improper Check for Unusual or Exceptional Conditions), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-121 (Stack-based Buffer Overflow), CWE-20 (Improper Input Validation).
Are there public exploits for phoenixtech vulnerabilities?: Yes — 2 of phoenixtech's CVEs have a known public exploit.
What is the average severity of phoenixtech CVEs?: The average CVSS base score across phoenixtech's scored CVEs is 6.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track phoenixtech vulnerabilities

Get an alert for each new phoenixtech CVE, with AI-written analysis and remediation steps.

Create an account See pricing