Patchfirst: CVEs linked to T1134 Access Token Manipulationhttps://patchfirst.co/technique/T1134/New and newly exploited CVEs that lead to ATT&CK T1134 Access Token Manipulation, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMT[KEV] CVE-2025-29824: Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerabilityhttps://patchfirst.co/cve/CVE-2025-29824/CVE-2025-29824#kevTue, 08 Apr 2025 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2025-04-08, known ransomware use. ENISA EUVD lists it as exploited. EPSS 19.3% (higher than 97.3% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1134 Access Token Manipulation. Priority 77.9 of 100.kevransomwarepublic-exploitT1068T1134[KEV] CVE-2023-36033: Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerabilityhttps://patchfirst.co/cve/CVE-2023-36033/CVE-2023-36033#kevTue, 14 Nov 2023 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2023-11-14. ENISA EUVD lists it as exploited. EPSS 10.9% (higher than 95.9% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1134 Access Token Manipulation. Priority 62.6 of 100.kevT1068T1134[KEV] CVE-2019-0543: Microsoft Windows Privilege Escalation Vulnerabilityhttps://patchfirst.co/cve/CVE-2019-0543/CVE-2019-0543#kevTue, 15 Mar 2022 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2022-03-15, known ransomware use. ENISA EUVD lists it as exploited. EPSS 4.7% (higher than 91.8% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1134 Access Token Manipulation. Priority 76.8 of 100.kevransomwarepublic-exploitT1068T1134[KEV] CVE-2016-0099: Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerabilityhttps://patchfirst.co/cve/CVE-2016-0099/CVE-2016-0099#kevThu, 03 Mar 2022 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2022-03-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 37.0% (higher than 98.5% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1134 Access Token Manipulation. Priority 78.2 of 100.kevransomwarepublic-exploitT1068T1134[KEV] CVE-2002-0367: Microsoft Windows Privilege Escalation Vulnerabilityhttps://patchfirst.co/cve/CVE-2002-0367/CVE-2002-0367#kevThu, 03 Mar 2022 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 4.9% (higher than 92.1% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1134 Access Token Manipulation. Priority 66.9 of 100.kevpublic-exploitT1068T1134CVE-2020-0981: A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker…https://patchfirst.co/cve/CVE-2020-0981/CVE-2020-0981Wed, 15 Apr 2020 00:00:00 GMTMicrosoft · Windows 10 Version 1909 for 32-bit Systems. Not in CISA KEV. EPSS 1.3% (higher than 69.8% of CVEs). Public exploit code exists. ATT&CK: T1134 Access Token Manipulation; T1068 Exploitation for Privilege Escalation; T1497 Virtualization/Sandbox Evasion. Priority 19.0 of 100.public-exploitT1134T1068T1497