https://patchfirst.co/technique/T1055.001/New and newly exploited CVEs that lead to ATT&CK T1055.001 Dynamic-link Library Injection, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2015-5119/CVE-2015-5119#kevThu, 03 Mar 2022 00:00:00 GMTAdobe · Flash Player. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 98.6% (higher than 99.92% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1059.007 JavaScript; T1566.002 Spearphishing Link; T1105 Ingress Tool Transfer; T1055.001 Dynamic-link Library Injection; T1071.001 Web Protocols. Named in 5 threat reports. Priority 74.8 of 100.kevpublic-exploitT1059.007T1566.002T1105T1055.001T1071.001https://patchfirst.co/cve/CVE-2018-11072/CVE-2018-11072Tue, 02 Oct 2018 00:00:00 GMTDell EMC · Dell Digital Delivery. Not in CISA KEV. EPSS 0.4% (higher than 35.3% of CVEs). ATT&CK: T1055.001 Dynamic-link Library Injection. Priority 7.1 of 100.T1055.001