https://patchfirst.co/technique/T1136.001/New and newly exploited CVEs that lead to ATT&CK T1136.001 Local Account, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2022-47966/CVE-2022-47966#kevMon, 23 Jan 2023 00:00:00 GMTZoho · ManageEngine. In CISA KEV since 2023-01-23, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.8% (higher than 99.95% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1068 Exploitation for Privilege Escalation; T1136.001 Local Account. Named in 3 threat reports. Priority 87.6 of 100.kevransomwarepublic-exploitT1190T1068T1136.001https://patchfirst.co/cve/CVE-2022-21999/CVE-2022-21999#kevFri, 25 Mar 2022 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2022-03-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 41.0% (higher than 98.7% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter; T1136.001 Local Account; T1211 Exploitation for Stealth. Priority 78.2 of 100.kevransomwarepublic-exploitT1078T1068T1059T1136.001T1211