1078
New Embedded Vulns (7 Days)
8739
Active Critical ESVs
apple
Top Target (30 Days)
6.97
Average ESV CVSS Score
Vulnerability Trends (Last 6 Months)
ESV Severity Distribution (90 Days)
Top Affected ESV Vendors (90 Days)
- google 133 Vulns
- apple 120 Vulns
- tenda 98 Vulns
- microsoft 65 Vulns
- adobe 57 Vulns
Recent Critical ESVs
CVE-2026-33107
CRITICAL 10.0
CVE-2026-33105
CRITICAL 10.0
CVE-2026-32213
CRITICAL 10.0
CVE-2026-32211
CRITICAL 9.1
CVE-2026-26135
CRITICAL 9.6
Recently Added Vulnerabilities
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2026-33107 | Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a net… | Critical (10.0) | 2026-04-03 | Environment Specific |
| CVE-2026-33105 | Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over… | Critical (10.0) | 2026-04-03 | Environment Specific |
| CVE-2026-32213 | Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network. | Critical (10.0) | 2026-04-03 | Environment Specific |
| CVE-2026-32211 | Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose informatio… | Critical (9.1) | 2026-04-03 | Environment Specific |
| CVE-2026-32173 | Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network. | High (8.6) | 2026-04-03 | Environment Specific |