Phoenix Technologies, Inc.

First CVE: Nov 15, 2023Active for: 3 years
8
CVEs Published
More CVEs Published than 22% of tracked CNAs
2.7
Avg CVEs / Year
More Avg CVEs / Year than 18% of tracked CNAs
6.0
Avg CVSS Score
Higher Avg CVSS Score than 9% of tracked CNAs
0.0%
In CISA KEV
Bottom 1%

Self-Reporting Analysis

Of all the CVEs published by Phoenix Technologies, Inc. as a CNA, 0.0% affect products that Phoenix Technologies, Inc. develops as a vendor.

100.0%
Self-reported: 0Third-party: 8

Of all the CVEs published that affect products developed by Phoenix Technologies, Inc., 0.0% are self-published by Phoenix Technologies, Inc. as a CNA.

100.0%
Self-published: 0Published by other CNAs: 1

Trends Over Time

The number and severity of CVEs published by Phoenix Technologies, Inc. over time

Volume of CVEsAvg CVSS Base Score
First CVE
Nov 15, 2023
2 years ago
Most Recent CVE
May 13, 2025
437 days ago

Top CVEs

All CVEs published by Phoenix Technologies, Inc. as a CNA, regardless of affected vendor or product.

8 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for select Intel platforms This issue affects: Phoenix SecureCore™ for Intel Kaby Lake: f
May 14, 20247.826NONO
Improper Input Validation in the processing of user-supplied splash screen during system boot in Phoenix SecureCore™ Technology™ 4 potentially allows denial-of-service attacks or a
Dec 7, 20237.825NONO
Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for Intel Gemini Lake.This issue affects: SecureCore™ for Intel Gemini Lake: from 4.1.0.1 befo
May 14, 20247.822NONO
Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects
May 14, 20247.822NONO
Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification. This issue affects SecureCore™ Technology™ 4: * from 4
Nov 15, 20237.119NONO
Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore Technology 4 allows Input Data Manipulation.This issue affects SecureCore Technology 4: fro
May 13, 20253.314NONO
Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for In
Jan 14, 20253.312NONO
Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for In
Jan 14, 20253.312NONO

CVE Severity & Scoring

Severity distribution of CVEs published by this CNA8 CVEs
Severity distribution among all CVEs352,231 CVEs
LowHigh
Attack Vector
Local8 (100.0%)
Network0 (0.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low8 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None8 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low8 (100.0%)
High0 (0.0%)
None0 (0.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this cna scope (8 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID published by Phoenix Technologies, Inc. as a CNA.

Media Mentions

Media articles that mention a CVE ID published by Phoenix Technologies, Inc. as a CNA — matched by CVE ID, not by organization name.

Top Affected Vendors

Top Affected Products

Top CWEs