Home Embedded Vulns General Vulns

ESV-Tracker

An AI-powered database that classifies embedded vulnerabilities separately from general-purpose ones.

No Dedicated Database Existed. Until Now.

Embedded system vulnerabilities are critical, yet buried alongside millions of general CVEs. ESV-Tracker changes that.

Your Embedded Threat Center.

Search the database, track embedded CVEs, and explore real-time statistics — all in one place.

4340
New Embedded Vulns (7 Days)
10493
Active Critical ESVs
jetbrains
Top Target (30 Days)
6.92
Average ESV CVSS Score

Vulnerability Trends (Last 6 Months)

ESV Severity Distribution (90 Days)

Top Affected ESV Vendors (90 Days)

  • google 129 Vulns
  • dell 48 Vulns
  • microsoft 27 Vulns
  • apple 10 Vulns
  • jetbrains 7 Vulns

Recent Critical ESVs

CVE-2026-102608 CRITICAL 9.0
CVE-2026-111711 CRITICAL 9.8
CVE-2026-111708 CRITICAL 9.8
CVE-2026-111704 CRITICAL 9.8
CVE-2026-111693 CRITICAL 9.8

Recently Added Vulnerabilities

CVE ID Description Severity Published Type
CVE-2012-6307 A vulnerability exists in JPEGsnoop 1.5.2 due to an unspecified issue in JPEG file handling, which could let a maliciou… High (8.8) 2020-02-06 Environment Specific
CVE-2012-6306 A vulnerability exists in HCView (aka Hardcoreview) 1.4 due to a write access violation with a GIF file. Critical (9.8) 2020-02-06 General Purpose
CVE-2012-6297 Command Injection vulnerability exists via a CSRF in DD-WRT 24-sp2 from specially crafted configuration values containi… High (8.8) 2020-02-06 Environment Specific
CVE-2020-8772 The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in iwp_mmb_set_request in i… Critical (9.8) 2020-02-06 General Purpose
CVE-2020-8771 The Time Capsule plugin before 1.21.16 for WordPress has an authentication bypass. Any request containing IWP_JSON_PREF… Critical (9.8) 2020-02-06 General Purpose