Home Embedded Vulns General Vulns

ESV-Tracker

An AI-powered database that classifies embedded vulnerabilities separately from general-purpose ones.

No Dedicated Database Existed. Until Now.

Embedded system vulnerabilities are critical, yet buried alongside millions of general CVEs. ESV-Tracker changes that.

Your Embedded Threat Center.

Search the database, track embedded CVEs, and explore real-time statistics — all in one place.

4490
New Embedded Vulns (7 Days)
10513
Active Critical ESVs
jetbrains
Top Target (30 Days)
6.92
Average ESV CVSS Score

Vulnerability Trends (Last 6 Months)

ESV Severity Distribution (90 Days)

Top Affected ESV Vendors (90 Days)

  • google 129 Vulns
  • dell 48 Vulns
  • microsoft 27 Vulns
  • apple 10 Vulns
  • jetbrains 7 Vulns

Recent Critical ESVs

CVE-2026-112779 CRITICAL 9.8
CVE-2026-112776 CRITICAL 9.8
CVE-2026-109437 CRITICAL 9.8
CVE-2026-111862 CRITICAL 9.8
CVE-2026-107188 CRITICAL 9.6

Recently Added Vulnerabilities

CVE ID Description Severity Published Type
CVE-2026-100348 kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3.Loader can dereference a nil SchemaR… Medium (5.3) 2026-10-15 Environment Specific
CVE-2026-100347 kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3filter.ValidationHandler uses the rou… Medium (5.3) 2026-10-15 Environment Specific
CVE-2026-9703 Grafana's data source proxy did not apply role-based access control to write requests forwarded to Loki data sources. A… High (7.1) 2026-10-15 General Purpose
CVE-2026-95180 An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information a… Medium (5.5) 2026-10-15 Environment Specific
CVE-2026-95179 An issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to cause a denial of service via a c… High (7.5) 2026-10-15 Environment Specific