Home Embedded Vulns General Vulns

ESV-Tracker

An AI-powered database that classifies embedded vulnerabilities separately from general-purpose ones.

No Dedicated Database Existed. Until Now.

Embedded system vulnerabilities are critical, yet buried alongside millions of general CVEs. ESV-Tracker changes that.

Your Embedded Threat Center.

Search the database, track embedded CVEs, and explore real-time statistics — all in one place.

2719
New Embedded Vulns (7 Days)
9794
Active Critical ESVs
google
Top Target (30 Days)
6.94
Average ESV CVSS Score

Vulnerability Trends (Last 6 Months)

ESV Severity Distribution (90 Days)

Top Affected ESV Vendors (90 Days)

  • google 129 Vulns
  • dell 48 Vulns
  • microsoft 27 Vulns
  • apple 10 Vulns
  • snipeitapp 2 Vulns

Recent Critical ESVs

CVE-2026-82901 CRITICAL 9.8
CVE-2026-85984 CRITICAL 9.8
CVE-2026-100717 CRITICAL 9.9
CVE-2026-100715 CRITICAL 9.6
CVE-2026-100714 CRITICAL 9.1

Recently Added Vulnerabilities

CVE ID Description Severity Published Type
CVE-2020-6620 stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8. High (8.8) 2020-01-08 Environment Specific
CVE-2020-6619 stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek. High (8.8) 2020-01-08 Environment Specific
CVE-2020-6618 stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table. High (8.8) 2020-01-08 Environment Specific
CVE-2020-6617 stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int. High (8.8) 2020-01-08 Environment Specific
CVE-2011-5266 Imperva SecureSphere Web Application Firewall (WAF) before 12-august-2010 allows SQL injection filter bypass. Critical (9.8) 2020-01-08 General Purpose