Read the docs

Philips

Records121All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical12CVSS 9.0–10.0
CVSS high57CVSS 7.0–8.9

Exploited now

Philips records in CISA KEV
TI-2017-00134 Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2021-11-03TI-2017-00184 Microsoft Office and WordPad Remote Code Execution Vulnerability Priority CRITICAL 93KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Intellispace Portal 11 records CRITICAL Patient Information Center Ix 11 records LOW E-alert Firmware 10 records MEDIUM Hue Bridge V2 Firmware 9 records MEDIUM Vue Pacs 9 records MEDIUM Clinical Collaboration Platform 8 records LOW Myvue 8 records MEDIUM Speech 8 records MEDIUM

Records

9 records in Hue Bridge V2 Firmware · all components

TI-2026-03070 CVE-2026-3560 · GHSA-7wwf-329w-9wr3

Heap-based buffer overflow in Philips Hue Bridge

Priority MEDIUM 41

Philips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00583 Published 2026-03-13 No fix listed CWE-122
TI-2026-03066 CVE-2026-3556 · GHSA-m47r-64cx-chh5

Heap-based buffer overflow in Philips Hue Bridge

Priority MEDIUM 41

Philips Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00618 Published 2026-03-13 No fix listed CWE-122
TI-2020-04908 CVE-2020-6007 · GHSA-vf3h-hp75-rg56

Heap-based buffer overflow in Philips Hue Bridge 2.X

Priority LOW 39

Philips Hue Bridge model 2.X prior to and including version 1935144020 contains a Heap-based Buffer Overflow when handling a long ZCL string during the commissioning phase, resulting in a remote code execution.

CVSS 3.1HIGH 7.9 Adjacent network No auth User interaction EPSS 0.02132 Published 2020-01-23 No fix listed CWE-122
TI-2026-03072 CVE-2026-3562 · GHSA-6wwq-69q4-fc36

Improper signature verification in Philips Hue Bridge

Priority LOW 38

Philips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00289 Published 2026-03-13 No fix listed CWE-347
TI-2026-03071 CVE-2026-3561 · GHSA-83wp-894h-3qf5

Heap-based buffer overflow in Philips Hue Bridge

Priority LOW 38

Philips Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00595 Published 2026-03-13 No fix listed CWE-122
TI-2026-03068 CVE-2026-3558 · GHSA-8jxm-4xfh-vc8v

Missing authentication in Philips Hue Bridge

Priority LOW 38

Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability.

CVSS 3.0HIGH 8.1 Adjacent network No auth No interaction EPSS 0.00481 Published 2026-03-13 No fix listed CWE-306
TI-2026-03067 CVE-2026-3557 · GHSA-65gc-f4hp-xpp4

Heap-based buffer overflow in Philips Hue Bridge

Priority LOW 38

Philips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00595 Published 2026-03-13 No fix listed CWE-122
TI-2026-03065 CVE-2026-3555 · GHSA-2q8v-6q3v-prjc

Heap-based buffer overflow in Philips Hue Bridge

Priority LOW 37

Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00353 Published 2026-03-13 No fix listed CWE-122
Open these records in search →