Vendors / espressif Records 59 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 22
Exploited now espressif records in CISA KEV No espressif vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00571 · Published 2026-05-12 · Fixed in 3.3.8 CWE-121
Priority HIGH 73
arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers.
CVSS 3.1 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00307 · Published 2026-04-24 · Fixed in 3.3.8 CWE-121
Priority LOW 39
arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00351 · Published 2026-05-12 · Fixed in 3.3.8 CWE-287
Priority LOW 32
The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 processes EAP Success messages before any EAP method completion or failure, which allows attackers in radio r…
CVSS 3.0 MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.0147 · Published 2019-09-04 · No fix listed
Open these records in search → All records by CVSS severity
4 22 31 1 1
THREATIST.IORead the docs