CVE Program partner

Phoenix

Phoenix Technologies, Inc.

API
CVEs, 365 days08 all time, 0 rejected
Quality-median 99%
CVSS by the CNA-share of records
CWE-share of records
Affected versions-not n/a or unspecified
CVSS added by CISA-lower is better
OrganisationPhoenix Technologies, Inc.
RoleCNA
TypeVendor, Researcher
Reports tomitre
ScopeAll Phoenix Technologies products (supported products and end-of-life/end-of-service products), as well as vulnerabilities in third-party software discovered by Phoenix Technologies that are not in another CNA’s scope.
Advisorieshttps://phoenixtech.com/security-notifications/

Latest CVEs · RSS

  • CVE-2024-12533 2025-05-13 · CVSS 3.3
    Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore Technology 4 allows Input Data Manipulation.This issue affects SecureCo
  • CVE-2024-29980 2025-01-14 · CVSS 4.6
    Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoeni
  • CVE-2024-29979 2025-01-14 · CVSS 4.6
    Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoeni
  • CVE-2024-1598 2024-05-14 · CVSS 7.5
    Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for Intel Gemini Lake.This issue affects: SecureCore™ for Intel Gemini Lak
  • CVE-2024-0762 2024-05-14 · CVSS 7.5
    Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for select Intel platforms This issue affects: Phoenix SecureCore™ fo
  • CVE-2023-35841 2024-05-14 · CVSS 7.8
    Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmwar
  • CVE-2023-5058 2023-12-07
    Improper Input Validation in the processing of user-supplied splash screen during system boot in Phoenix SecureCore™ Technology™ 4 potentially allows denial-of-
  • CVE-2023-31100 2023-11-14 · CVSS 8.4
    Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification. This issue affects SecureCore™ Technolo

All CVE Program partners