https://patchfirst.co/technique/T1036/New and newly exploited CVEs that lead to ATT&CK T1036 Masquerading, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-32202/CVE-2026-32202#kevTue, 28 Apr 2026 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2026-04-28. ENISA EUVD lists it as exploited. EPSS 70.9% (higher than 99.4% of CVEs). CVSS 4.3 MEDIUM. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1036 Masquerading. Priority 70.9 of 100.kevpublic-exploitT1204.002T1036https://patchfirst.co/cve/CVE-2024-43573/CVE-2024-43573#kevTue, 08 Oct 2024 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2024-10-08. ENISA EUVD lists it as exploited. EPSS 46.1% (higher than 98.8% of CVEs). CVSS 8.1 HIGH. ATT&CK: T1204.002 Malicious File; T1036 Masquerading. Priority 63.4 of 100.kevT1204.002T1036https://patchfirst.co/cve/CVE-2022-26501/CVE-2022-26501#kevTue, 13 Dec 2022 00:00:00 GMTVeeam · Backup & Replication. In CISA KEV since 2022-12-13, known ransomware use. ENISA EUVD lists it as exploited. EPSS 4.1% (higher than 90.7% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1036 Masquerading; T1048 Exfiltration Over Alternative Protocol. Priority 73.0 of 100.kevransomwareT1190T1059T1036T1048https://patchfirst.co/cve/CVE-2022-26500/CVE-2022-26500#kevTue, 13 Dec 2022 00:00:00 GMTVeeam · Backup & Replication. In CISA KEV since 2022-12-13, known ransomware use. ENISA EUVD lists it as exploited. EPSS 5.8% (higher than 93.1% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1078 Valid Accounts; T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1036 Masquerading; T1048 Exfiltration Over Alternative Protocol. Priority 72.8 of 100.kevransomwareT1078T1190T1059T1036T1048https://patchfirst.co/cve/CVE-2020-3153/CVE-2020-3153#kevMon, 24 Oct 2022 00:00:00 GMTCisco · AnyConnect Secure. In CISA KEV since 2022-10-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS 28.5% (higher than 98.1% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1036 Masquerading; T1574.001 DLL. Priority 77.2 of 100.kevransomwarepublic-exploitT1078T1036T1574.001https://patchfirst.co/cve/CVE-2018-20250/CVE-2018-20250#kevTue, 15 Feb 2022 00:00:00 GMTRARLAB · WinRAR. In CISA KEV since 2022-02-15, known ransomware use. ENISA EUVD lists it as exploited. EPSS 96.0% (higher than 99.88% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1036 Masquerading; T1204.002 Malicious File. Named in 3 threat reports. Priority 86.2 of 100.kevransomwarepublic-exploitT1036T1204.002https://patchfirst.co/cve/CVE-2020-0601/CVE-2020-0601#kevWed, 03 Nov 2021 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 89.1% (higher than 99.78% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1553.002 Code Signing; T1036 Masquerading. Priority 78.6 of 100.kevpublic-exploitT1553.002T1036https://patchfirst.co/cve/CVE-2020-15233/CVE-2020-15233Fri, 02 Oct 2020 00:00:00 GMTory · fosite. Not in CISA KEV. EPSS 0.8% (higher than 56.5% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1566.002 Spearphishing Link; T1036 Masquerading. Priority 15.6 of 100.T1566.002T1036https://patchfirst.co/cve/CVE-2020-16198/CVE-2020-16198Fri, 18 Sep 2020 00:00:00 GMTPhilips · Clinical Collaboration Platform. Not in CISA KEV. EPSS 0.6% (higher than 46.9% of CVEs). CVSS 5.0 MEDIUM. ATT&CK: T1036 Masquerading. Priority 12.9 of 100.T1036https://patchfirst.co/cve/CVE-2020-1456/CVE-2020-1456Tue, 14 Jul 2020 00:00:00 GMTMicrosoft · Microsoft SharePoint Enterprise Server. Not in CISA KEV. EPSS 2.2% (higher than 82.7% of CVEs). CVSS 5.4 MEDIUM. ATT&CK: T1059 Command and Scripting Interpreter; T1005 Data from Local System; T1036 Masquerading; T1485 Data Destruction; T1565 Data Manipulation. Priority 21.0 of 100.T1059T1005T1036T1485T1565https://patchfirst.co/cve/CVE-2020-5270/CVE-2020-5270Mon, 20 Apr 2020 00:00:00 GMTPrestaShop · PrestaShop. Not in CISA KEV. EPSS 0.8% (higher than 57.6% of CVEs). CVSS 4.1 MEDIUM. ATT&CK: T1566.002 Spearphishing Link; T1005 Data from Local System; T1036 Masquerading; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 14.4 of 100.T1566.002T1005T1036T1059.007T1557https://patchfirst.co/cve/CVE-2020-5250/CVE-2020-5250Thu, 05 Mar 2020 00:00:00 GMTPrestaShop · PrestaShop. Not in CISA KEV. EPSS 0.9% (higher than 58.2% of CVEs). CVSS 7.6 HIGH. Public exploit code exists. ATT&CK: T1036 Masquerading. Priority 22.0 of 100.public-exploitT1036https://patchfirst.co/cve/CVE-2019-1031/CVE-2019-1031Wed, 12 Jun 2019 00:00:00 GMTMicrosoft · Microsoft SharePoint Enterprise Server 2016. Not in CISA KEV. EPSS 1.7% (higher than 76.7% of CVEs). ATT&CK: T1059 Command and Scripting Interpreter; T1005 Data from Local System; T1036 Masquerading; T1485 Data Destruction; T1565 Data Manipulation. Priority 15.3 of 100.T1059T1005T1036T1485T1565https://patchfirst.co/cve/CVE-2019-3788/CVE-2019-3788Thu, 25 Apr 2019 00:00:00 GMTCloud Foundry · UAA Release (OSS). Not in CISA KEV. EPSS 0.8% (higher than 57.6% of CVEs). CVSS 8.7 HIGH. ATT&CK: T1566.002 Spearphishing Link; T1036 Masquerading. Priority 17.6 of 100.T1566.002T1036https://patchfirst.co/cve/CVE-2019-1831/CVE-2019-1831Thu, 18 Apr 2019 00:00:00 GMTCisco · Cisco Email Security Appliance (ESA). Not in CISA KEV. EPSS 1.6% (higher than 76.4% of CVEs). CVSS 5.8 MEDIUM. ATT&CK: T1036 Masquerading; T1566 Phishing. Priority 19.3 of 100.T1036T1566https://patchfirst.co/cve/CVE-2019-3778/CVE-2019-3778Thu, 07 Mar 2019 00:00:00 GMTSpring · Spring Security OAuth. Not in CISA KEV. EPSS 16.6% (higher than 97% of CVEs). Public exploit code exists. ATT&CK: T1566.002 Spearphishing Link; T1036 Masquerading. Priority 25.5 of 100.public-exploitT1566.002T1036https://patchfirst.co/cve/CVE-2018-17934/CVE-2018-17934Tue, 27 Nov 2018 00:00:00 GMTNot in CISA KEV. EPSS 19.7% (higher than 97.4% of CVEs). Public exploit code exists. ATT&CK: T1202 Indirect Command Execution; T1005 Data from Local System; T1036 Masquerading; T1203 Exploitation for Client Execution. Priority 24.5 of 100.public-exploitT1202T1005T1036T1203https://patchfirst.co/cve/CVE-2018-11067/CVE-2018-11067Mon, 26 Nov 2018 00:00:00 GMTDell EMC · Avamar. Not in CISA KEV. EPSS 1.8% (higher than 78.6% of CVEs). ATT&CK: T1566.002 Spearphishing Link; T1036 Masquerading. Priority 15.7 of 100.T1566.002T1036https://patchfirst.co/cve/CVE-2018-8607/CVE-2018-8607Wed, 14 Nov 2018 00:00:00 GMTMicrosoft · Microsoft Dynamics 365. Not in CISA KEV. EPSS 1.6% (higher than 75.8% of CVEs). ATT&CK: T1059 Command and Scripting Interpreter; T1005 Data from Local System; T1036 Masquerading; T1485 Data Destruction; T1565 Data Manipulation. Priority 15.2 of 100.T1059T1005T1036T1485T1565https://patchfirst.co/cve/CVE-2018-5451/CVE-2018-5451Wed, 28 Mar 2018 00:00:00 GMTPhilips · Philips Alice 6 System. Not in CISA KEV. EPSS 2.6% (higher than 85.6% of CVEs). ATT&CK: T1036 Masquerading. Priority 17.1 of 100.T1036