CVE Tracker
2 recordsEvery published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 4 added to KEV in the last 7 days.
VendorAllmicrosoft 85mozilla 43google 37openclaw 30linux 24ibm 19dlink 19wwbn 19mattermost 18samsung 17tenda 16adobe 16canva 15gvectors 14jettweb 13f5 13parseplatform 11raytha 11arubanetworks 10hcltech 10lenovo 9gl-inet 9redhat 9nextclickventures 9
| CVE | CVSS | EPSS | KEV sources | Patch window | Vendor / product | Summary | Published |
|---|---|---|---|---|---|---|---|
| CVE-2025-27850 | 7.5 | — | — | — | garmin / empirbus wireless display unit firmware | The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a symlink attack. | 166d ago |
| CVE-2025-27853 | 7.3 | — | — | — | garmin / empirbus wireless display unit firmware | The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows its authentication to be bypassed. | 166d ago |
Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.