<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Phoenix Technologies, Inc. — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/phoenix" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by Phoenix Technologies, Inc. (phoenix).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/phoenix.png</url>
      <title>Phoenix Technologies, Inc. — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:07 GMT</lastBuildDate>
    <item>
      <title>CVE-2024-12533 · 3.3 LOW</title>
      <link>https://vulnogram.org/CVE-2024-12533</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-12533</guid>
      <description>Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore Technology 4 allows Input Data Manipulation.This issue affects SecureCore Technology 4: from 4.0.1.0 before 4.0.1.1018, from 4.1.0.1 before 4.1.0.573, from 4.2.0…</description>
      <category>Low</category>
      <pubDate>Tue, 13 May 2025 14:56:41 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-29980 · 4.6 MEDIUM — Unsafe Handling of IHV UEFI Variables</title>
      <link>https://vulnogram.org/CVE-2024-29980</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-29980</guid>
      <description>Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for Intel Ice Lake allows Input Da…</description>
      <category>Medium</category>
      <pubDate>Tue, 14 Jan 2025 16:00:15 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-29979 · 4.6 MEDIUM — Unsafe Handling of Phoenix UEFI Variables</title>
      <link>https://vulnogram.org/CVE-2024-29979</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-29979</guid>
      <description>Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for Intel Ice Lake allows Input Da…</description>
      <category>Medium</category>
      <pubDate>Tue, 14 Jan 2025 16:00:15 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-1598 · 7.5 HIGH — Potential buffer overflow when handling UEFI variables</title>
      <link>https://vulnogram.org/CVE-2024-1598</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-1598</guid>
      <description>Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for Intel Gemini Lake.This issue affects: SecureCore™ for Intel Gemini Lake: from 4.1.0.1 before 4.1.0.567.</description>
      <category>High</category>
      <pubDate>Tue, 14 May 2024 14:56:38 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-0762 · 7.5 HIGH — Potential buffer overflow when handling UEFI variables</title>
      <link>https://vulnogram.org/CVE-2024-0762</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-0762</guid>
      <description>Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for select Intel platforms This issue affects: Phoenix SecureCore™ for Intel Kaby Lake: from 4.0.1.1 before 4.0.1.998; Phoenix SecureCore™ for Intel Coffee Lake: from 4…</description>
      <category>High</category>
      <pubDate>Tue, 14 May 2024 14:56:25 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-35841 · 7.8 HIGH — WinFlash Driver Permissions Issue</title>
      <link>https://vulnogram.org/CVE-2023-35841</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-35841</guid>
      <description>Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0.</description>
      <category>High</category>
      <pubDate>Tue, 14 May 2024 14:56:14 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-5058</title>
      <link>https://vulnogram.org/CVE-2023-5058</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-5058</guid>
      <description>Improper Input Validation in the processing of user-supplied splash screen during system boot in Phoenix SecureCore™ Technology™ 4 potentially allows denial-of-service attacks or arbitrary code execution.</description>
      <pubDate>Thu, 07 Dec 2023 22:29:05 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-31100 · 8.4 HIGH</title>
      <link>https://vulnogram.org/CVE-2023-31100</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-31100</guid>
      <description>Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification. This issue affects SecureCore™ Technology™ 4: * from 4.3.0.0 before 4.3.0.203 * from 4.3.1.0 before 4.3.1.163 * from 4.4.0.0 befo…</description>
      <category>High</category>
      <pubDate>Tue, 14 Nov 2023 23:17:07 GMT</pubDate>
    </item>
  </channel>
</rss>
