# cve.now: Philips

The newest entries naming Philips as an affected vendor (up to 200), of 88 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-3562](https://cve.now/CVE-2026-3562.md): Philips Hue Bridge hk\_hap Ed25519 Signature Verification Authentication Bypass Vulnerability (CVSS 6.3)
- [CVE-2026-3561](https://cve.now/CVE-2026-3561.md): Philips Hue Bridge hk\_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.0)
- [CVE-2026-3560](https://cve.now/CVE-2026-3560.md): Philips Hue Bridge HomeKit hk\_hap\_pair\_storage\_put Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2026-3559](https://cve.now/CVE-2026-3559.md): Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability (CVSS 8.1)
- [CVE-2026-3558](https://cve.now/CVE-2026-3558.md): Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability (CVSS 8.1)
- [CVE-2026-3557](https://cve.now/CVE-2026-3557.md): Philips Hue Bridge hap\_pair\_verify\_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.0)
- [CVE-2026-3556](https://cve.now/CVE-2026-3556.md): Philips Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2026-3555](https://cve.now/CVE-2026-3555.md): Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.0)
- [CVE-2025-3426](https://cve.now/CVE-2025-3426.md): Use of default hardcoded credentials (CVSS 7.2)
- [CVE-2025-3425](https://cve.now/CVE-2025-3425.md): Unauthenticated Remote Code Execution via .NET Deserialization (CVSS 7.3)
- [CVE-2025-3424](https://cve.now/CVE-2025-3424.md): 3.2.1 Arbitrary File Read in insecure .NET Remoting TCP Channel (CVSS 7.7)
- [CVE-2025-2229](https://cve.now/CVE-2025-2229.md): Philips Intellispace Cardiovascular (ISCV) Use of Weak Credentials (CVSS 7.7)
- [CVE-2025-2230](https://cve.now/CVE-2025-2230.md): Philips Intellispace Cardiovascular (ISCV) Improper Authentication (CVSS 7.7)
- [CVE-2023-40704](https://cve.now/CVE-2023-40704.md): Philips Vue PACS Use of Default Credentials (CVSS 6.8)
- [CVE-2018-8863](https://cve.now/CVE-2018-8863.md): Philips EncoreAnywhere Exposure of Sensitive Information to an Unauthorized Actor (CVSS 5.9)
- [CVE-2021-32966](https://cve.now/CVE-2021-32966.md): Philips Interoperability Solution XDS - Clear Text Transmission of Sensitive Information (CVSS 3.7)
- [CVE-2022-0922](https://cve.now/CVE-2022-0922.md): ICSMA-22-088-01 Philips e-Alert (CVSS 6.5)
- [CVE-2021-33018](https://cve.now/CVE-2021-33018.md): Philips Vue PACS Use of a Broken or Risky Cryptographic Algorithm (CVSS 7.5)
- [CVE-2021-33022](https://cve.now/CVE-2021-33022.md): Philips Vue PACS Cleartext Transmission of Sensitive Information (CVSS 7.5)
- [CVE-2021-27497](https://cve.now/CVE-2021-27497.md): Philips Vue PACS Protection Mechanism Failure (CVSS 6.5)
- [CVE-2021-33024](https://cve.now/CVE-2021-33024.md): Philips Vue PACS Insufficiently Protected Credentials (CVSS 3.7)
- [CVE-2021-33020](https://cve.now/CVE-2021-33020.md): Philips Vue PACS Use of a Key Past its Expiration Date (CVSS 8.2)
- [CVE-2021-27501](https://cve.now/CVE-2021-27501.md): Philips Vue PACS Improper Adherence to Coding Standards (CVSS 7.5)
- [CVE-2021-27493](https://cve.now/CVE-2021-27493.md): Philips Vue PACS (CVSS 6.1)
- [CVE-2021-27456](https://cve.now/CVE-2021-27456.md): Philips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access Control (CVSS 2.4)
- [CVE-2021-23173](https://cve.now/CVE-2021-23173.md): ICSMA-22-006-01 Philips Engage Software (CVSS 2.6)
- [CVE-2021-43550](https://cve.now/CVE-2021-43550.md): Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of a Broken or Risky Cryptographic Algorithm (CVSS 5.9)
- [CVE-2021-43548](https://cve.now/CVE-2021-43548.md): Philips Patient Information Center iX (PIC iX) and Efficia CM Series Improper Input Validation (CVSS 6.5)
- [CVE-2021-43552](https://cve.now/CVE-2021-43552.md): Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of Hard-coded Cryptographic Key (CVSS 6.1)
- [CVE-2021-33017](https://cve.now/CVE-2021-33017.md): Philips IntelliBridge EC 40 and EC 80 Hub Authentication Bypass Using an Alternate Path or Channel (CVSS 8.1)
- [CVE-2021-32993](https://cve.now/CVE-2021-32993.md): Philips IntelliBridge EC 40 and EC 80 Hub Use of Hard-coded Credentials (CVSS 8.1)
- [CVE-2021-26248](https://cve.now/CVE-2021-26248.md): Philips MRI 1.5T and 3T Incorrect Ownership Assignment (CVSS 5.9)
- [CVE-2021-42744](https://cve.now/CVE-2021-42744.md): Philips MRI 1.5T and 3T Information Exposure (CVSS 5.9)
- [CVE-2021-26262](https://cve.now/CVE-2021-26262.md): Philips MRI 1.5T and 3T Improper Access Control (CVSS 5.9)
- [CVE-2020-27298](https://cve.now/CVE-2020-27298.md): Philips Interventional Workstations OS Command Injection (CVSS 6.5)
- [CVE-2020-16247](https://cve.now/CVE-2020-16247.md): Philips Clinical Collaboration Platform Configuration (CVSS 6.8)
- [CVE-2020-16200](https://cve.now/CVE-2020-16200.md): Philips Clinical Collaboration Platform Algorithm Downgrade (CVSS 6.5)
- [CVE-2020-16198](https://cve.now/CVE-2020-16198.md): Philips Clinical Collaboration Platform Protection Mechanism Failure (CVSS 5.0)
- [CVE-2020-14525](https://cve.now/CVE-2020-14525.md): Philips Clinical Collaboration Platform Improper Neutralization of Script in Attributes in a Web Page (CVSS 3.5)
- [CVE-2020-14506](https://cve.now/CVE-2020-14506.md): Philips Clinical Collaboration Platform Cross-site Request Forgery (CVSS 3.4)
- [CVE-2020-16212](https://cve.now/CVE-2020-16212.md): Philips Patient Monitoring Devices Exposure of Resource to Wrong Sphere (no CVSS)
- [CVE-2020-16220](https://cve.now/CVE-2020-16220.md): Philips Patient Monitoring Devices Improper Validation of Syntactic Correctness of Input (no CVSS)
- [CVE-2020-16216](https://cve.now/CVE-2020-16216.md): Philips Patient Monitoring Devices Improper Input Validation (no CVSS)
- [CVE-2020-16224](https://cve.now/CVE-2020-16224.md): Philips Patient Monitoring Devices Improper Handling of Length Parameter Inconsistency (no CVSS)
- [CVE-2020-16228](https://cve.now/CVE-2020-16228.md): Philips Patient Monitoring Devices Improper Check for Certificate Revocation (no CVSS)
- [CVE-2020-16222](https://cve.now/CVE-2020-16222.md): Philips Patient Monitoring Devices Improper Authentication (no CVSS)
- [CVE-2020-16214](https://cve.now/CVE-2020-16214.md): Philips Patient Monitoring Devices Improper Neutralization of Formula Elements in a CSV File (no CVSS)
- [CVE-2020-16218](https://cve.now/CVE-2020-16218.md): Philips Patient Monitoring Devices Cross-site Scripting (no CVSS)
- [CVE-2020-16239](https://cve.now/CVE-2020-16239.md): Philips SureSigns VS4 Improper Authentication (CVSS 4.9)
- [CVE-2020-16241](https://cve.now/CVE-2020-16241.md): Philips SureSigns VS4 Improper Access Control (CVSS 6.3)
- [CVE-2020-16237](https://cve.now/CVE-2020-16237.md): Philips SureSigns VS4 Improper Input Validation (CVSS 2.1)
- [CVE-2020-14518](https://cve.now/CVE-2020-14518.md): Philips DreamMapper Insertion of Sensitive Information into Log File (CVSS 5.3)
- [CVE-2020-7360](https://cve.now/CVE-2020-7360.md): Philips SmartControl DLL Hijacking (CVSS 7.4)
- [CVE-2020-14477](https://cve.now/CVE-2020-14477.md): Philips Ultrasound Systems Authentication Bypass Using an Alternate Path or Channel (CVSS 3.6)
- [CVE-2020-12023](https://cve.now/CVE-2020-12023.md): Philips IntelliBridge Enterprise IBE Insertion of Sensitive Information into Log File (CVSS 2.0)
- [CVE-2019-10968](https://cve.now/CVE-2019-10968.md): Philips Holter 2010 Plus, all versions. (no CVSS)
- [CVE-2019-6562](https://cve.now/CVE-2019-6562.md): In Philips Tasy EMR, Tasy EMR Versions 3.02.1744 and prior, the software incorrectly neutralizes user-controllable input before it is placed (no CVSS)
- [CVE-2018-8856](https://cve.now/CVE-2018-8856.md): Philips e-Alert Unit (non-medical device), Version R2.1 and prior. (no CVSS)
- [CVE-2018-8854](https://cve.now/CVE-2018-8854.md): Philips e-Alert Unit (non-medical device), Version R2.1 and prior. (no CVSS)
- [CVE-2018-8852](https://cve.now/CVE-2018-8852.md): Philips e-Alert Unit (non-medical device), Version R2.1 and prior. (no CVSS)
- [CVE-2018-8850](https://cve.now/CVE-2018-8850.md): Philips e-Alert Unit (non-medical device), Version R2.1 and prior. (no CVSS)
- [CVE-2018-8848](https://cve.now/CVE-2018-8848.md): Philips e-Alert Unit (non-medical device), Version R2.1 and prior. (no CVSS)
- [CVE-2018-8846](https://cve.now/CVE-2018-8846.md): Philips e-Alert Unit (non-medical device), Version R2.1 and prior. (no CVSS)
- [CVE-2018-8844](https://cve.now/CVE-2018-8844.md): Philips e-Alert Unit (non-medical device), Version R2.1 and prior. (no CVSS)
- [CVE-2018-8842](https://cve.now/CVE-2018-8842.md): Philips e-Alert Unit (non-medical device), Version R2.1 and prior. (no CVSS)
- [CVE-2018-14803](https://cve.now/CVE-2018-14803.md): Philips e-Alert Unit (non-medical device), Version R2.1 and prior. (no CVSS)
- [CVE-2018-14801](https://cve.now/CVE-2018-14801.md): In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, an attacker with both the superuser passwor (no CVSS)
- [CVE-2018-14799](https://cve.now/CVE-2018-14799.md): In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, the PageWriter device does not sanitize dat (no CVSS)
- [CVE-2018-14789](https://cve.now/CVE-2018-14789.md): In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 3.1 or prior and Xcelera Version 4.1 or prior), an unquoted search pat (no CVSS)
- [CVE-2018-14787](https://cve.now/CVE-2018-14787.md): In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 2.x or prior and Xcelera Version 4.1 or prior), an attacker with escal (no CVSS)
- [CVE-2018-8861](https://cve.now/CVE-2018-8861.md): Vulnerabilities within the Philips Brilliance CT kiosk environment (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and (no CVSS)
- [CVE-2018-8857](https://cve.now/CVE-2018-8857.md): Philips Brilliance CT software (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3. (no CVSS)
- [CVE-2018-8853](https://cve.now/CVE-2018-8853.md): Philips Brilliance CT devices operate user functions from within a contained kiosk in a Microsoft Windows operating system. (no CVSS)
- [CVE-2017-9658](https://cve.now/CVE-2017-9658.md): Certain 802.11 network management messages have been determined to invoke wireless access point blacklisting security defenses when not requ (no CVSS)
- [CVE-2017-9657](https://cve.now/CVE-2017-9657.md): Under specific 802.11 network conditions, a partial re-association of the Philips IntelliVue MX40 Version B.06.18 WLAN monitor to the centra (no CVSS)
- [CVE-2017-9656](https://cve.now/CVE-2017-9656.md): The backend database of the Philips DoseWise Portal application versions 1.1.7.333 and 2.1.1.3069 uses hard-coded credentials for a database (no CVSS)
- [CVE-2017-9654](https://cve.now/CVE-2017-9654.md): The Philips DoseWise Portal web-based application versions 1.1.7.333 and 2.1.1.3069 stores login credentials in clear text within backend sy (no CVSS)
- [CVE-2018-7498](https://cve.now/CVE-2018-7498.md): In Philips Alice 6 System version R8.0.2 or prior, the lack of proper data encryption passes up the guarantees of confidentiality, integrity (no CVSS)
- [CVE-2018-5451](https://cve.now/CVE-2018-5451.md): In Philips Alice 6 System version R8.0.2 or prior, when an actor claims to have a given identity, the software does not prove or insufficien (no CVSS)
- [CVE-2018-5474](https://cve.now/CVE-2018-5474.md): Philips Intellispace Portal all versions 7.0.x and 8.0.x have an input validation vulnerability that could allow a remote attacker to execut (no CVSS)
- [CVE-2018-5472](https://cve.now/CVE-2018-5472.md): Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could allow an attacker to (no CVSS)
- [CVE-2018-5470](https://cve.now/CVE-2018-5470.md): Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an unquoted search path or element vulnerability that has been identified, (no CVSS)
- [CVE-2018-5468](https://cve.now/CVE-2018-5468.md): Philips Intellispace Portal all versions 7.0.x and 8.0.x have a remote desktop access vulnerability that could allow an attacker to gain una (no CVSS)
- [CVE-2018-5466](https://cve.now/CVE-2018-5466.md): Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a self-signed SSL certificate vulnerability this could allow an attacker t (no CVSS)
- [CVE-2018-5464](https://cve.now/CVE-2018-5464.md): Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an untrusted SSL certificate vulnerability this could allow an attacker to (no CVSS)
- [CVE-2018-5462](https://cve.now/CVE-2018-5462.md): Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an SSL incorrect hostname certificate vulnerability this could allow an at (no CVSS)
- [CVE-2018-5458](https://cve.now/CVE-2018-5458.md): Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability using SSL legacy encryption that could allow an attacker t (no CVSS)
- [CVE-2018-5454](https://cve.now/CVE-2018-5454.md): Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability where code debugging methods are enabled, which could allo (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/philips
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.