https://patchfirst.co/technique/T1068/New and newly exploited CVEs that lead to ATT&CK T1068 Exploitation for Privilege Escalation, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-111357/CVE-2026-111357#kevFri, 30 Oct 2026 00:00:00 GMTIvanti · Connect Secure. In CISA KEV since 2026-10-30. ENISA EUVD lists it as exploited. EPSS 0.3% (higher than 24.6% of CVEs). CVSS 7.0 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1548 Abuse Elevation Control Mechanism. Priority 57.0 of 100.kevT1068T1548https://patchfirst.co/cve/CVE-2026-46300/CVE-2026-46300#kevWed, 28 Oct 2026 00:00:00 GMTLinux · Kernel. In CISA KEV since 2026-10-28. ENISA EUVD lists it as exploited. EPSS 16.1% (higher than 96.9% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 77.5 of 100.kevpublic-exploitT1068https://patchfirst.co/cve/CVE-2026-114625/CVE-2026-114625#kevFri, 23 Oct 2026 00:00:00 GMTArista · VeloCloud Orchestrator. In CISA KEV since 2026-10-23. ENISA EUVD lists it as exploited. EPSS 1.0% (higher than 63.5% of CVEs). CVSS 9.9 CRITICAL. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1068 Exploitation for Privilege Escalation; T1190 Exploit Public-Facing Application. Priority 72.5 of 100.kevpublic-exploitT1078T1068T1190https://patchfirst.co/cve/CVE-2026-106931/CVE-2026-106931#kevTue, 20 Oct 2026 00:00:00 GMTEG Secure Solutions · SiteGuard Server Edition. In CISA KEV since 2026-10-20. ENISA EUVD lists it as exploited. EPSS 2.5% (higher than 84.9% of CVEs). CVSS 8.5 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 70.7 of 100.kevT1068T1059https://patchfirst.co/cve/CVE-2026-102490/CVE-2026-102490#kevFri, 02 Oct 2026 00:00:00 GMTZammad GmbH · Zammad. In CISA KEV since 2026-10-02. ENISA EUVD lists it as exploited. EPSS 10.9% (higher than 95.9% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 72.6 of 100.kevT1068T1059https://patchfirst.co/cve/CVE-2026-71362/CVE-2026-71362#kevThu, 24 Sep 2026 00:00:00 GMTAdobe · Commerce and Magento . In CISA KEV since 2026-09-24. ENISA EUVD lists it as exploited. EPSS 90.5% (higher than 99.8% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1068 Exploitation for Privilege Escalation. Priority 79.3 of 100.kevpublic-exploitT1190T1068https://patchfirst.co/cve/CVE-2026-93952/CVE-2026-93952#kevTue, 22 Sep 2026 00:00:00 GMTArista · VeloCloud Orchestrator. In CISA KEV since 2026-09-22. ENISA EUVD lists it as exploited. EPSS 1.4% (higher than 72.2% of CVEs). CVSS 10.0 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1068 Exploitation for Privilege Escalation. Priority 69.4 of 100.kevT1190T1068https://patchfirst.co/cve/CVE-2025-39964/CVE-2025-39964#kevFri, 18 Sep 2026 00:00:00 GMTLinux · Kernel. In CISA KEV since 2026-09-18. ENISA EUVD lists it as exploited. EPSS 1.6% (higher than 75.3% of CVEs). CVSS 5.5 MEDIUM. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1499.004 Application or System Exploitation. Priority 71.9 of 100.kevpublic-exploitT1068T1499.004https://patchfirst.co/cve/CVE-2026-53266/CVE-2026-53266#kevFri, 18 Sep 2026 00:00:00 GMTLinux · Kernel. In CISA KEV since 2026-09-18. ENISA EUVD lists it as exploited. EPSS 0.9% (higher than 60.7% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 71.3 of 100.kevpublic-exploitT1068https://patchfirst.co/cve/CVE-2026-87886/CVE-2026-87886Thu, 17 Sep 2026 00:00:00 GMTAcronis · Backup. In CISA KEV since 2026-09-16. ENISA EUVD lists it as exploited. EPSS 0.2% (higher than 14.3% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1078 Valid Accounts; T1068 Exploitation for Privilege Escalation. Priority 56.3 of 100.kevT1078T1068https://patchfirst.co/cve/CVE-2026-58704/CVE-2026-58704#kevWed, 16 Sep 2026 00:00:00 GMTGoogle · Pixel. In CISA KEV since 2026-09-16. ENISA EUVD lists it as exploited. EPSS 0.6% (higher than 49.9% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1211 Exploitation for Stealth; T1068 Exploitation for Privilege Escalation. Priority 64.1 of 100.kevT1211T1068https://patchfirst.co/cve/CVE-2026-86060/CVE-2026-86060#kevThu, 10 Sep 2026 00:00:00 GMTMikroTik · RouterOS. In CISA KEV since 2026-09-10. ENISA EUVD lists it as exploited. EPSS 6.4% (higher than 93.7% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1068 Exploitation for Privilege Escalation. Priority 78.6 of 100.kevpublic-exploitT1190T1068https://patchfirst.co/cve/CVE-2026-81963/CVE-2026-81963#kevTue, 08 Sep 2026 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2026-09-08. ENISA EUVD lists it as exploited. EPSS 0.4% (higher than 33.5% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 65.2 of 100.kevpublic-exploitT1068T1059https://patchfirst.co/cve/CVE-2026-85880/CVE-2026-85880#kevTue, 08 Sep 2026 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2026-09-08. ENISA EUVD lists it as exploited. EPSS 0.4% (higher than 32.8% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1055 Process Injection. Priority 60.0 of 100.kevT1068T1055https://patchfirst.co/cve/CVE-2026-53362/CVE-2026-53362#kevThu, 27 Aug 2026 00:00:00 GMTLinux · Kernel. In CISA KEV since 2026-08-27. ENISA EUVD lists it as exploited. EPSS 0.7% (higher than 53.5% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 69.2 of 100.kevpublic-exploitT1068https://patchfirst.co/cve/CVE-2022-0995/CVE-2022-0995#kevWed, 26 Aug 2026 00:00:00 GMTLinux · Kernel. In CISA KEV since 2026-08-26. ENISA EUVD lists it as exploited. EPSS 8.9% (higher than 95.2% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 77.5 of 100.kevpublic-exploitT1068https://patchfirst.co/cve/CVE-2015-5287/CVE-2015-5287#kevWed, 26 Aug 2026 00:00:00 GMTRed Hat · Automatic Bug Reporting Tool. In CISA KEV since 2026-08-26. ENISA EUVD lists it as exploited. EPSS 5.0% (higher than 92.2% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1068 Exploitation for Privilege Escalation. Priority 76.9 of 100.kevpublic-exploitT1078T1068https://patchfirst.co/cve/CVE-2026-68820/CVE-2026-68820#kevTue, 11 Aug 2026 00:00:00 GMTMicrosoft · Windows Ancillary Function Driver for WinSock . In CISA KEV since 2026-08-11. ENISA EUVD lists it as exploited. EPSS 8.6% (higher than 95.1% of CVEs). CVSS 7.0 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 76.9 of 100.kevpublic-exploitT1068https://patchfirst.co/cve/CVE-2026-46817/CVE-2026-46817#kevWed, 15 Jul 2026 00:00:00 GMTOracle · E-Business Suite. In CISA KEV since 2026-07-15. ENISA EUVD lists it as exploited. EPSS 12.3% (higher than 96.2% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1068 Exploitation for Privilege Escalation. Priority 84.1 of 100.kevpublic-exploitT1190T1068https://patchfirst.co/cve/CVE-2026-56164/CVE-2026-56164#kevTue, 14 Jul 2026 00:00:00 GMTMicrosoft · SharePoint Server. In CISA KEV since 2026-07-14. ENISA EUVD lists it as exploited. EPSS 1.0% (higher than 63.1% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1068 Exploitation for Privilege Escalation. Priority 67.5 of 100.kevpublic-exploitT1190T1068https://patchfirst.co/cve/CVE-2026-56155/CVE-2026-56155#kevTue, 14 Jul 2026 00:00:00 GMTMicrosoft · Active Directory Federation Services. In CISA KEV since 2026-07-14. ENISA EUVD lists it as exploited. EPSS 0.3% (higher than 28.2% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1078 Valid Accounts; T1068 Exploitation for Privilege Escalation. Priority 54.1 of 100.kevT1078T1068https://patchfirst.co/cve/CVE-2026-20245/CVE-2026-20245#kevTue, 09 Jun 2026 00:00:00 GMTCisco · Catalyst SD-WAN Manager. In CISA KEV since 2026-06-09. ENISA EUVD lists it as exploited. EPSS 25.3% (higher than 97.9% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 73.0 of 100.kevpublic-exploitT1068T1059https://patchfirst.co/cve/CVE-2022-0492/CVE-2022-0492#kevTue, 02 Jun 2026 00:00:00 GMTLinux · Kernel. In CISA KEV since 2026-06-02. ENISA EUVD lists it as exploited. EPSS 5.5% (higher than 92.8% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1611 Escape to Host. Priority 72.0 of 100.kevpublic-exploitT1068T1611https://patchfirst.co/cve/CVE-2025-48595/CVE-2025-48595#kevTue, 02 Jun 2026 00:00:00 GMTAndroid · Framework. In CISA KEV since 2026-06-02. ENISA EUVD lists it as exploited. EPSS 1.9% (higher than 80.2% of CVEs). CVSS 8.4 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 69.9 of 100.kevpublic-exploitT1068T1059https://patchfirst.co/cve/CVE-2026-48172/CVE-2026-48172#kevTue, 26 May 2026 00:00:00 GMTLiteSpeed · cPanel Plugin. In CISA KEV since 2026-05-26. ENISA EUVD lists it as exploited. EPSS 17.9% (higher than 97.2% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1068 Exploitation for Privilege Escalation. Priority 84.3 of 100.kevpublic-exploitT1190T1068https://patchfirst.co/cve/CVE-2026-41091/CVE-2026-41091#kevWed, 20 May 2026 00:00:00 GMTMicrosoft · Defender. In CISA KEV since 2026-05-20. ENISA EUVD lists it as exploited. EPSS 8.2% (higher than 94.9% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1548 Abuse Elevation Control Mechanism. Priority 72.4 of 100.kevpublic-exploitT1068T1548https://patchfirst.co/cve/CVE-2026-31431/CVE-2026-31431#kevFri, 01 May 2026 00:00:00 GMTLinux · Kernel. In CISA KEV since 2026-05-01. ENISA EUVD lists it as exploited. EPSS 98.1% (higher than 99.91% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 73.4 of 100.kevpublic-exploitT1068https://patchfirst.co/cve/CVE-2024-57726/CVE-2024-57726#kevFri, 24 Apr 2026 00:00:00 GMTSimpleHelp · SimpleHelp. In CISA KEV since 2026-04-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS 66.4% (higher than 99.28% of CVEs). CVSS 9.9 CRITICAL. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1068 Exploitation for Privilege Escalation. Priority 79.8 of 100.kevransomwarepublic-exploitT1078T1068https://patchfirst.co/cve/CVE-2026-33825/CVE-2026-33825#kevWed, 22 Apr 2026 00:00:00 GMTMicrosoft · Defender. In CISA KEV since 2026-04-22, known ransomware use. ENISA EUVD lists it as exploited. EPSS 6.7% (higher than 94% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1068 Exploitation for Privilege Escalation. Priority 82.3 of 100.kevransomwarepublic-exploitT1078T1068https://patchfirst.co/cve/CVE-2025-60710/CVE-2025-60710#kevMon, 13 Apr 2026 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2026-04-13, known ransomware use. ENISA EUVD lists it as exploited. EPSS 4.6% (higher than 91.7% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 81.8 of 100.kevransomwarepublic-exploitT1068T1059https://patchfirst.co/cve/CVE-2023-36424/CVE-2023-36424#kevMon, 13 Apr 2026 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2026-04-13. ENISA EUVD lists it as exploited. EPSS 12.1% (higher than 96.1% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1548 Abuse Elevation Control Mechanism. Priority 72.7 of 100.kevpublic-exploitT1068T1548https://patchfirst.co/cve/CVE-2025-43520/CVE-2025-43520#kevFri, 20 Mar 2026 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2026-03-20. ENISA EUVD lists it as exploited. EPSS 0.4% (higher than 36.8% of CVEs). CVSS 5.5 MEDIUM. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1068 Exploitation for Privilege Escalation; T1499.004 Application or System Exploitation. Priority 59.2 of 100.kevpublic-exploitT1204.002T1068T1499.004https://patchfirst.co/cve/CVE-2025-43510/CVE-2025-43510#kevFri, 20 Mar 2026 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2026-03-20. ENISA EUVD lists it as exploited. EPSS 0.4% (higher than 29.3% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.002 Malicious File; T1068 Exploitation for Privilege Escalation. Priority 54.3 of 100.kevT1204.002T1068https://patchfirst.co/cve/CVE-2023-41974/CVE-2023-41974#kevThu, 05 Mar 2026 00:00:00 GMTApple · iOS and iPadOS. In CISA KEV since 2026-03-05. ENISA EUVD lists it as exploited. EPSS 2.0% (higher than 80.2% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1068 Exploitation for Privilege Escalation. Priority 69.5 of 100.kevpublic-exploitT1204.002T1068https://patchfirst.co/cve/CVE-2026-21385/CVE-2026-21385#kevTue, 03 Mar 2026 00:00:00 GMTQualcomm · Multiple Chipsets. In CISA KEV since 2026-03-03. ENISA EUVD lists it as exploited. EPSS 1.3% (higher than 70.7% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1068 Exploitation for Privilege Escalation. Priority 67.6 of 100.kevpublic-exploitT1204.002T1068https://patchfirst.co/cve/CVE-2022-20775/CVE-2022-20775#kevWed, 25 Feb 2026 00:00:00 GMTCisco · SD-WAN. In CISA KEV since 2026-02-25. ENISA EUVD lists it as exploited. EPSS 12.5% (higher than 96.2% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 76.6 of 100.kevpublic-exploitT1068T1059https://patchfirst.co/cve/CVE-2026-22769/CVE-2026-22769#kevWed, 18 Feb 2026 00:00:00 GMTDell · RecoverPoint for Virtual Machines (RP4VMs). In CISA KEV since 2026-02-18. ENISA EUVD lists it as exploited. EPSS 13.5% (higher than 96.4% of CVEs). CVSS 10.0 CRITICAL. ATT&CK: T1078 Valid Accounts; T1068 Exploitation for Privilege Escalation. Priority 69.3 of 100.kevT1078T1068https://patchfirst.co/cve/CVE-2026-20700/CVE-2026-20700#kevThu, 12 Feb 2026 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2026-02-12. ENISA EUVD lists it as exploited. EPSS 1.7% (higher than 76.9% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 68.8 of 100.kevpublic-exploitT1068T1059https://patchfirst.co/cve/CVE-2026-21533/CVE-2026-21533#kevTue, 10 Feb 2026 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2026-02-10. ENISA EUVD lists it as exploited. EPSS 4.2% (higher than 90.9% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 71.6 of 100.kevpublic-exploitT1068T1059https://patchfirst.co/cve/CVE-2026-21525/CVE-2026-21525#kevTue, 10 Feb 2026 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2026-02-10. ENISA EUVD lists it as exploited. EPSS 4.9% (higher than 92% of CVEs). CVSS 6.2 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1499.004 Application or System Exploitation. Priority 65.7 of 100.kevT1068T1499.004https://patchfirst.co/cve/CVE-2026-21519/CVE-2026-21519#kevTue, 10 Feb 2026 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2026-02-10. ENISA EUVD lists it as exploited. EPSS 2.5% (higher than 84.5% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 65.4 of 100.kevT1068https://patchfirst.co/cve/CVE-2018-14634/CVE-2018-14634#kevMon, 26 Jan 2026 00:00:00 GMTLinux · Kernel. In CISA KEV since 2026-01-26. ENISA EUVD lists it as exploited. EPSS 14.7% (higher than 96.7% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 72.8 of 100.kevpublic-exploitT1068https://patchfirst.co/cve/CVE-2025-40602/CVE-2025-40602Thu, 18 Dec 2025 00:00:00 GMTSonicWall · SMA1000 appliance. In CISA KEV since 2025-12-17. ENISA EUVD lists it as exploited. EPSS 2.8% (higher than 86.2% of CVEs). CVSS 6.6 MEDIUM. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1078 Valid Accounts. Priority 79.9 of 100.kevpublic-exploitT1068T1078https://patchfirst.co/cve/CVE-2025-62221/CVE-2025-62221#kevTue, 09 Dec 2025 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2025-12-09. ENISA EUVD lists it as exploited. EPSS 2.5% (higher than 84.7% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 70.4 of 100.kevpublic-exploitT1068T1059https://patchfirst.co/cve/CVE-2025-48572/CVE-2025-48572Mon, 08 Dec 2025 00:00:00 GMTAndroid · Framework. In CISA KEV since 2025-12-02. ENISA EUVD lists it as exploited. EPSS 0.3% (higher than 17.6% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1548 Abuse Elevation Control Mechanism. Priority 52.0 of 100.kevT1068T1548https://patchfirst.co/cve/CVE-2025-48633/CVE-2025-48633Mon, 08 Dec 2025 00:00:00 GMTAndroid · Framework. In CISA KEV since 2025-12-02. ENISA EUVD lists it as exploited. EPSS 0.3% (higher than 18% of CVEs). CVSS 5.5 MEDIUM. ATT&CK: T1078 Valid Accounts; T1068 Exploitation for Privilege Escalation. Priority 50.5 of 100.kevT1078T1068https://patchfirst.co/cve/CVE-2025-62215/CVE-2025-62215#kevWed, 12 Nov 2025 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2025-11-12. ENISA EUVD lists it as exploited. EPSS 4.5% (higher than 91.4% of CVEs). CVSS 7.0 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1068 Exploitation for Privilege Escalation. Priority 71.2 of 100.kevpublic-exploitT1078T1068https://patchfirst.co/cve/CVE-2025-41244/CVE-2025-41244#kevThu, 30 Oct 2025 00:00:00 GMTBroadcom · VMware Aria Operations and VMware Tools. In CISA KEV since 2025-10-30. ENISA EUVD lists it as exploited. EPSS 8.6% (higher than 95.1% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1548 Abuse Elevation Control Mechanism. Priority 67.5 of 100.kevpublic-exploitT1068T1548https://patchfirst.co/cve/CVE-2025-6205/CVE-2025-6205#kevTue, 28 Oct 2025 00:00:00 GMTDassault Systèmes · DELMIA Apriso. In CISA KEV since 2025-10-28. ENISA EUVD lists it as exploited. EPSS 73.7% (higher than 99.47% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1068 Exploitation for Privilege Escalation. Priority 69.3 of 100.kevpublic-exploitT1190T1068https://patchfirst.co/cve/CVE-2025-33073/CVE-2025-33073#kevMon, 20 Oct 2025 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2025-10-20. ENISA EUVD lists it as exploited. EPSS 82.7% (higher than 99.67% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1078 Valid Accounts. Priority 79.1 of 100.kevpublic-exploitT1068T1078