{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: CVEs linked to T1189 Drive-by Compromise","home_page_url":"https://patchfirst.co/technique/T1189/","feed_url":"https://patchfirst.co/feed/technique/T1189.json","description":"New and newly exploited CVEs that lead to ATT&CK T1189 Drive-by Compromise, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-48356#kev","url":"https://patchfirst.co/cve/CVE-2026-48356/","title":"[KEV] CVE-2026-48356: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability","content_text":"Adobe · Commerce and Magento. In CISA KEV since 2026-10-27. ENISA EUVD lists it as exploited. EPSS 44.6% (higher than 98.8% of CVEs). CVSS 9.3 CRITICAL. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 78.3 of 100.","summary":"Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability","date_published":"2026-10-27T00:00:00.000Z","date_modified":"2026-10-28T13:34:50.000Z","tags":["kev","public-exploit","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":78.3,"kev":{"dateAdded":"2026-10-27","ransomware":false},"epss":{"score":0.44579,"percentile":0.98767},"cvss":{"score":9.3,"severity":"CRITICAL","version":"3.1"},"vendor":"Adobe","product":"Commerce and Magento","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-87491#kev","url":"https://patchfirst.co/cve/CVE-2026-87491/","title":"[KEV] CVE-2026-87491: Google Chromium V8 Out of Bounds Write Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2026-09-09. ENISA EUVD lists it as exploited. EPSS 3.5% (higher than 89.2% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 77.0 of 100.","summary":"Google Chromium V8 Out of Bounds Write Vulnerability","date_published":"2026-09-09T00:00:00.000Z","date_modified":"2026-09-21T13:17:11.000Z","tags":["kev","public-exploit","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":77,"kev":{"dateAdded":"2026-09-09","ransomware":false},"epss":{"score":0.03507,"percentile":0.89175},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-85046#kev","url":"https://patchfirst.co/cve/CVE-2026-85046/","title":"[KEV] CVE-2026-85046: Google Chromium V8 Type Confusion Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2026-09-04. ENISA EUVD lists it as exploited. EPSS 1.8% (higher than 78.5% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 74.9 of 100.","summary":"Google Chromium V8 Type Confusion Vulnerability","date_published":"2026-09-04T00:00:00.000Z","date_modified":"2026-09-21T13:17:10.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":74.9,"kev":{"dateAdded":"2026-09-04","ransomware":false},"epss":{"score":0.01806,"percentile":0.78543},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-62593#kev","url":"https://patchfirst.co/cve/CVE-2025-62593/","title":"[KEV] CVE-2025-62593: Ray-Project Ray Code Injection Vulnerability","content_text":"Ray-Project · Ray. In CISA KEV since 2026-08-17. ENISA EUVD lists it as exploited. EPSS 60.2% (higher than 99.13% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 74.0 of 100.","summary":"Ray-Project Ray Code Injection Vulnerability","date_published":"2026-08-17T00:00:00.000Z","date_modified":"2026-10-19T13:10:00.000Z","tags":["kev","public-exploit","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":74,"kev":{"dateAdded":"2026-08-17","ransomware":false},"epss":{"score":0.6015,"percentile":0.99134},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Ray-Project","product":"Ray","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-11645#kev","url":"https://patchfirst.co/cve/CVE-2026-11645/","title":"[KEV] CVE-2026-11645: Google Chromium V8 Out-of-Bounds Read and Write Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2026-06-09. ENISA EUVD lists it as exploited. EPSS 2.4% (higher than 84.3% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 71.0 of 100.","summary":"Google Chromium V8 Out-of-Bounds Read and Write Vulnerability","date_published":"2026-06-09T00:00:00.000Z","date_modified":"2026-07-23T08:10:00.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":71,"kev":{"dateAdded":"2026-06-09","ransomware":false},"epss":{"score":0.0244,"percentile":0.84285},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2009-1537#kev","url":"https://patchfirst.co/cve/CVE-2009-1537/","title":"[KEV] CVE-2009-1537: Microsoft DirectX NULL Byte Overwrite Vulnerability","content_text":"Microsoft · DirectX. In CISA KEV since 2026-05-20. ENISA EUVD lists it as exploited. EPSS 51.4% (higher than 98.9% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 63.9 of 100.","summary":"Microsoft DirectX NULL Byte Overwrite Vulnerability","date_published":"2026-05-20T00:00:00.000Z","date_modified":"2026-06-16T23:07:28.000Z","tags":["kev","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":63.9,"kev":{"dateAdded":"2026-05-20","ransomware":false},"epss":{"score":0.51362,"percentile":0.98938},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"DirectX","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2010-0249#kev","url":"https://patchfirst.co/cve/CVE-2010-0249/","title":"[KEV] CVE-2010-0249: Microsoft Internet Explorer Use-After-Free Vulnerability","content_text":"Microsoft · Internet Explorer. In CISA KEV since 2026-05-20. ENISA EUVD lists it as exploited. EPSS 91.9% (higher than 99.82% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 54.1 of 100.","summary":"Microsoft Internet Explorer Use-After-Free Vulnerability","date_published":"2026-05-20T00:00:00.000Z","date_modified":"2026-06-16T23:15:47.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":54.1,"kev":{"dateAdded":"2026-05-20","ransomware":false},"epss":{"score":0.91939,"percentile":0.99818},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Internet Explorer","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2010-0806#kev","url":"https://patchfirst.co/cve/CVE-2010-0806/","title":"[KEV] CVE-2010-0806: Microsoft Internet Explorer Use-After-Free Vulnerability","content_text":"Microsoft · Internet Explorer. In CISA KEV since 2026-05-20. ENISA EUVD lists it as exploited. EPSS 82.2% (higher than 99.66% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 54.1 of 100.","summary":"Microsoft Internet Explorer Use-After-Free Vulnerability","date_published":"2026-05-20T00:00:00.000Z","date_modified":"2026-06-16T23:16:52.000Z","tags":["kev","public-exploit","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":54.1,"kev":{"dateAdded":"2026-05-20","ransomware":false},"epss":{"score":0.82241,"percentile":0.99656},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Internet Explorer","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-42897#kev","url":"https://patchfirst.co/cve/CVE-2026-42897/","title":"[KEV] CVE-2026-42897: Microsoft Exchange Server Cross-Site Scripting Vulnerability","content_text":"Microsoft · Microsoft. In CISA KEV since 2026-05-15. ENISA EUVD lists it as exploited. EPSS 70.7% (higher than 99.39% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript. Priority 72.1 of 100.","summary":"Microsoft Exchange Server Cross-Site Scripting Vulnerability","date_published":"2026-05-15T00:00:00.000Z","date_modified":"2026-10-26T14:10:00.000Z","tags":["kev","public-exploit","T1189","T1059.007"],"_patchfirst":{"reason":"kev","priority":72.1,"kev":{"dateAdded":"2026-05-15","ransomware":false},"epss":{"score":0.70662,"percentile":0.99393},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Microsoft","product":"Microsoft","techniqueIds":["T1189","T1059.007"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-5281#kev","url":"https://patchfirst.co/cve/CVE-2026-5281/","title":"[KEV] CVE-2026-5281: Google Dawn Use-After-Free Vulnerability","content_text":"Google · Dawn. In CISA KEV since 2026-04-01. ENISA EUVD lists it as exploited. EPSS 13.7% (higher than 96.5% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 73.5 of 100.","summary":"Google Dawn Use-After-Free Vulnerability","date_published":"2026-04-01T00:00:00.000Z","date_modified":"2026-07-24T21:10:00.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":73.5,"kev":{"dateAdded":"2026-04-01","ransomware":false},"epss":{"score":0.13743,"percentile":0.96505},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Dawn","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-31277#kev","url":"https://patchfirst.co/cve/CVE-2025-31277/","title":"[KEV] CVE-2025-31277: Apple Multiple Products Buffer Overflow Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2026-03-20. ENISA EUVD lists it as exploited. EPSS 1.7% (higher than 76.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 69.5 of 100.","summary":"Apple Multiple Products Buffer Overflow Vulnerability","date_published":"2026-03-20T00:00:00.000Z","date_modified":"2026-09-21T17:17:25.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":69.5,"kev":{"dateAdded":"2026-03-20","ransomware":false},"epss":{"score":0.01678,"percentile":0.7688},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-3909#kev","url":"https://patchfirst.co/cve/CVE-2026-3909/","title":"[KEV] CVE-2026-3909: Google Skia Out-of-Bounds Write Vulnerability","content_text":"Google · Skia. In CISA KEV since 2026-03-13. ENISA EUVD lists it as exploited. EPSS 2.3% (higher than 83.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 70.9 of 100.","summary":"Google Skia Out-of-Bounds Write Vulnerability","date_published":"2026-03-13T00:00:00.000Z","date_modified":"2026-06-17T10:44:24.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":70.9,"kev":{"dateAdded":"2026-03-13","ransomware":false},"epss":{"score":0.02342,"percentile":0.83618},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Skia","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-3910#kev","url":"https://patchfirst.co/cve/CVE-2026-3910/","title":"[KEV] CVE-2026-3910: Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2026-03-13. ENISA EUVD lists it as exploited. EPSS 2.7% (higher than 85.9% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 66.3 of 100.","summary":"Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability","date_published":"2026-03-13T00:00:00.000Z","date_modified":"2026-06-17T10:44:24.000Z","tags":["kev","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":66.3,"kev":{"dateAdded":"2026-03-13","ransomware":false},"epss":{"score":0.02693,"percentile":0.85879},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-30952#kev","url":"https://patchfirst.co/cve/CVE-2021-30952/","title":"[KEV] CVE-2021-30952: Apple Multiple Products Integer Overflow or Wraparound Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2026-03-05. ENISA EUVD lists it as exploited. EPSS 7.0% (higher than 94.1% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 72.3 of 100.","summary":"Apple Multiple Products Integer Overflow or Wraparound Vulnerability","date_published":"2026-03-05T00:00:00.000Z","date_modified":"2026-06-17T03:51:12.000Z","tags":["kev","public-exploit","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":72.3,"kev":{"dateAdded":"2026-03-05","ransomware":false},"epss":{"score":0.06964,"percentile":0.9412},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-43000#kev","url":"https://patchfirst.co/cve/CVE-2023-43000/","title":"[KEV] CVE-2023-43000: Apple Multiple products Use-After-Free Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2026-03-05. ENISA EUVD lists it as exploited. EPSS 4.0% (higher than 90.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 72.3 of 100.","summary":"Apple Multiple products Use-After-Free Vulnerability","date_published":"2026-03-05T00:00:00.000Z","date_modified":"2026-10-28T19:10:00.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":72.3,"kev":{"dateAdded":"2026-03-05","ransomware":false},"epss":{"score":0.04042,"percentile":0.90606},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-2441#kev","url":"https://patchfirst.co/cve/CVE-2026-2441/","title":"[KEV] CVE-2026-2441: Google Chromium CSS Use-After-Free Vulnerability","content_text":"Google · Chromium. In CISA KEV since 2026-02-17. ENISA EUVD lists it as exploited. EPSS 55.0% (higher than 99.02% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 74.0 of 100.","summary":"Google Chromium CSS Use-After-Free Vulnerability","date_published":"2026-02-17T00:00:00.000Z","date_modified":"2026-06-17T10:30:57.000Z","tags":["kev","public-exploit","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":74,"kev":{"dateAdded":"2026-02-17","ransomware":false},"epss":{"score":0.54957,"percentile":0.99024},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2008-0015#kev","url":"https://patchfirst.co/cve/CVE-2008-0015/","title":"[KEV] CVE-2008-0015: Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2026-02-17. ENISA EUVD lists it as exploited. EPSS 76.6% (higher than 99.54% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 69.1 of 100.","summary":"Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability","date_published":"2026-02-17T00:00:00.000Z","date_modified":"2026-06-16T22:48:45.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":69.1,"kev":{"dateAdded":"2026-02-17","ransomware":false},"epss":{"score":0.76576,"percentile":0.99542},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-21513#kev","url":"https://patchfirst.co/cve/CVE-2026-21513/","title":"[KEV] CVE-2026-21513: Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2026-02-10. ENISA EUVD lists it as exploited. EPSS 15.9% (higher than 96.9% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1553 Subvert Trust Controls. Priority 68.5 of 100.","summary":"Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability","date_published":"2026-02-10T00:00:00.000Z","date_modified":"2026-06-17T10:18:45.000Z","tags":["kev","T1189","T1553"],"_patchfirst":{"reason":"kev","priority":68.5,"kev":{"dateAdded":"2026-02-10","ransomware":false},"epss":{"score":0.15852,"percentile":0.96879},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1189","T1553"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2025-43529","url":"https://patchfirst.co/cve/CVE-2025-43529/","title":"CVE-2025-43529: Apple Multiple Products Use-After-Free WebKit Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2025-12-15. ENISA EUVD lists it as exploited. EPSS 25.7% (higher than 98% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 73.8 of 100.","summary":"Apple Multiple Products Use-After-Free WebKit Vulnerability","date_published":"2025-12-17T00:00:00.000Z","date_modified":"2026-10-07T11:10:00.000Z","tags":["kev","public-exploit","T1189","T1059"],"_patchfirst":{"reason":"published","priority":73.8,"kev":{"dateAdded":"2025-12-15","ransomware":false},"epss":{"score":0.2565,"percentile":0.9796},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-14174#kev","url":"https://patchfirst.co/cve/CVE-2025-14174/","title":"[KEV] CVE-2025-14174: Google Chromium Out of Bounds Memory Access Vulnerability","content_text":"Google · Chromium. In CISA KEV since 2025-12-12. ENISA EUVD lists it as exploited. EPSS 55.3% (higher than 99.03% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 74.0 of 100.","summary":"Google Chromium Out of Bounds Memory Access Vulnerability","date_published":"2025-12-12T00:00:00.000Z","date_modified":"2026-10-07T20:10:01.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":74,"kev":{"dateAdded":"2025-12-12","ransomware":false},"epss":{"score":0.55334,"percentile":0.9903},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-13223#kev","url":"https://patchfirst.co/cve/CVE-2025-13223/","title":"[KEV] CVE-2025-13223: Google Chromium V8 Type Confusion Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2025-11-19. ENISA EUVD lists it as exploited. EPSS 4.9% (higher than 92.1% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 67.6 of 100.","summary":"Google Chromium V8 Type Confusion Vulnerability","date_published":"2025-11-19T00:00:00.000Z","date_modified":"2026-07-14T15:21:34.000Z","tags":["kev","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":67.6,"kev":{"dateAdded":"2025-11-19","ransomware":false},"epss":{"score":0.049,"percentile":0.92081},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2022-48503#kev","url":"https://patchfirst.co/cve/CVE-2022-48503/","title":"[KEV] CVE-2022-48503: Apple Multiple Products Unspecified Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2025-10-20. ENISA EUVD lists it as exploited. EPSS 3.2% (higher than 88.2% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 61.8 of 100.","summary":"Apple Multiple Products Unspecified Vulnerability","date_published":"2025-10-20T00:00:00.000Z","date_modified":"2026-06-17T05:15:33.000Z","tags":["kev","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":61.8,"kev":{"dateAdded":"2025-10-20","ransomware":false},"epss":{"score":0.03213,"percentile":0.88175},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2013-3918#kev","url":"https://patchfirst.co/cve/CVE-2013-3918/","title":"[KEV] CVE-2013-3918: Microsoft Windows Out-of-Bounds Write Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2025-10-06. ENISA EUVD lists it as exploited. EPSS 73.7% (higher than 99.47% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution; T1499 Endpoint Denial of Service. Named in 1 threat report. Priority 72.9 of 100.","summary":"Microsoft Windows Out-of-Bounds Write Vulnerability","date_published":"2025-10-06T00:00:00.000Z","date_modified":"2026-06-16T23:56:01.000Z","tags":["kev","public-exploit","T1189","T1203","T1499"],"_patchfirst":{"reason":"kev","priority":72.9,"kev":{"dateAdded":"2025-10-06","ransomware":false},"epss":{"score":0.73693,"percentile":0.99472},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1189","T1203","T1499"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2013-3893#kev","url":"https://patchfirst.co/cve/CVE-2013-3893/","title":"[KEV] CVE-2013-3893: Microsoft Internet Explorer Resource Management Errors Vulnerability","content_text":"Microsoft · Internet Explorer. In CISA KEV since 2025-08-12. ENISA EUVD lists it as exploited. EPSS 87.6% (higher than 99.76% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript. Priority 54.1 of 100.","summary":"Microsoft Internet Explorer Resource Management Errors Vulnerability","date_published":"2025-08-12T00:00:00.000Z","date_modified":"2026-06-16T23:55:58.000Z","tags":["kev","public-exploit","T1189","T1059.007"],"_patchfirst":{"reason":"kev","priority":54.1,"kev":{"dateAdded":"2025-08-12","ransomware":false},"epss":{"score":0.87639,"percentile":0.99759},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Internet Explorer","techniqueIds":["T1189","T1059.007"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-6558#kev","url":"https://patchfirst.co/cve/CVE-2025-6558/","title":"[KEV] CVE-2025-6558: Google Chromium ANGLE and GPU Improper Input Validation Vulnerability","content_text":"Google · Chromium. In CISA KEV since 2025-07-22. ENISA EUVD lists it as exploited. EPSS 10.9% (higher than 95.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution; T1497 Virtualization/Sandbox Evasion. Priority 68.3 of 100.","summary":"Google Chromium ANGLE and GPU Improper Input Validation Vulnerability","date_published":"2025-07-22T00:00:00.000Z","date_modified":"2026-10-01T12:00:53.000Z","tags":["kev","public-exploit","T1189","T1203","T1497"],"_patchfirst":{"reason":"kev","priority":68.3,"kev":{"dateAdded":"2025-07-22","ransomware":false},"epss":{"score":0.10927,"percentile":0.95873},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium","techniqueIds":["T1189","T1203","T1497"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-6554#kev","url":"https://patchfirst.co/cve/CVE-2025-6554/","title":"[KEV] CVE-2025-6554: Google Chromium V8 Type Confusion Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2025-07-02. ENISA EUVD lists it as exploited. EPSS 14.1% (higher than 96.6% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution; T1059 Command and Scripting Interpreter. Priority 68.0 of 100.","summary":"Google Chromium V8 Type Confusion Vulnerability","date_published":"2025-07-02T00:00:00.000Z","date_modified":"2026-06-17T10:02:08.000Z","tags":["kev","public-exploit","T1189","T1203","T1059"],"_patchfirst":{"reason":"kev","priority":68,"kev":{"dateAdded":"2025-07-02","ransomware":false},"epss":{"score":0.14142,"percentile":0.96571},"cvss":{"score":8.1,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1203","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-5419#kev","url":"https://patchfirst.co/cve/CVE-2025-5419/","title":"[KEV] CVE-2025-5419: Google Chromium V8 Out-of-Bounds Read and Write Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2025-06-05. ENISA EUVD lists it as exploited. EPSS 7.5% (higher than 94.5% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.1 of 100.","summary":"Google Chromium V8 Out-of-Bounds Read and Write Vulnerability","date_published":"2025-06-05T00:00:00.000Z","date_modified":"2026-06-17T09:47:52.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":68.1,"kev":{"dateAdded":"2025-06-05","ransomware":false},"epss":{"score":0.07486,"percentile":0.9447},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-44308#kev","url":"https://patchfirst.co/cve/CVE-2024-44308/","title":"[KEV] CVE-2024-44308: Apple Multiple Products Code Execution Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2024-11-21. ENISA EUVD lists it as exploited. EPSS 9.9% (higher than 95.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.3 of 100.","summary":"Apple Multiple Products Code Execution Vulnerability","date_published":"2024-11-21T00:00:00.000Z","date_modified":"2026-06-17T07:52:45.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":68.3,"kev":{"dateAdded":"2024-11-21","ransomware":false},"epss":{"score":0.09852,"percentile":0.95556},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-44309#kev","url":"https://patchfirst.co/cve/CVE-2024-44309/","title":"[KEV] CVE-2024-44309: Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2024-11-21. ENISA EUVD lists it as exploited. EPSS 21.9% (higher than 97.7% of CVEs). CVSS 6.3 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 61.9 of 100.","summary":"Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability","date_published":"2024-11-21T00:00:00.000Z","date_modified":"2026-06-17T07:52:45.000Z","tags":["kev","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":61.9,"kev":{"dateAdded":"2024-11-21","ransomware":false},"epss":{"score":0.21948,"percentile":0.97651},"cvss":{"score":6.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2014-0502#kev","url":"https://patchfirst.co/cve/CVE-2014-0502/","title":"[KEV] CVE-2014-0502: Adobe Flash Player Double Free Vulnerablity","content_text":"Adobe · Flash Player. In CISA KEV since 2024-09-17. ENISA EUVD lists it as exploited. EPSS 24.8% (higher than 97.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.7 of 100.","summary":"Adobe Flash Player Double Free Vulnerablity","date_published":"2024-09-17T00:00:00.000Z","date_modified":"2026-06-17T00:03:09.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":68.7,"kev":{"dateAdded":"2024-09-17","ransomware":false},"epss":{"score":0.24817,"percentile":0.97901},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Adobe","product":"Flash Player","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2013-0643#kev","url":"https://patchfirst.co/cve/CVE-2013-0643/","title":"[KEV] CVE-2013-0643: Adobe Flash Player Incorrect Default Permissions Vulnerability","content_text":"Adobe · Flash Player. In CISA KEV since 2024-09-17. ENISA EUVD lists it as exploited. EPSS 10.5% (higher than 95.8% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 48.3 of 100.","summary":"Adobe Flash Player Incorrect Default Permissions Vulnerability","date_published":"2024-09-17T00:00:00.000Z","date_modified":"2026-06-16T23:49:49.000Z","tags":["kev","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":48.3,"kev":{"dateAdded":"2024-09-17","ransomware":false},"epss":{"score":0.10533,"percentile":0.95763},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Adobe","product":"Flash Player","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2013-0648#kev","url":"https://patchfirst.co/cve/CVE-2013-0648/","title":"[KEV] CVE-2013-0648: Adobe Flash Player Code Execution Vulnerability","content_text":"Adobe · Flash Player. In CISA KEV since 2024-09-17. ENISA EUVD lists it as exploited. EPSS 11.1% (higher than 95.9% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 48.3 of 100.","summary":"Adobe Flash Player Code Execution Vulnerability","date_published":"2024-09-17T00:00:00.000Z","date_modified":"2026-06-16T23:49:50.000Z","tags":["kev","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":48.3,"kev":{"dateAdded":"2024-09-17","ransomware":false},"epss":{"score":0.11094,"percentile":0.95919},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Adobe","product":"Flash Player","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2024-7965#kev","url":"https://patchfirst.co/cve/CVE-2024-7965/","title":"[KEV] CVE-2024-7965: Google Chromium V8 Inappropriate Implementation Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2024-08-28. ENISA EUVD lists it as exploited. EPSS 18.5% (higher than 97.2% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.6 of 100.","summary":"Google Chromium V8 Inappropriate Implementation Vulnerability","date_published":"2024-08-28T00:00:00.000Z","date_modified":"2026-06-17T08:21:34.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":68.6,"kev":{"dateAdded":"2024-08-28","ransomware":false},"epss":{"score":0.18528,"percentile":0.97246},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-7971#kev","url":"https://patchfirst.co/cve/CVE-2024-7971/","title":"[KEV] CVE-2024-7971: Google Chromium V8 Type Confusion Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2024-08-26. ENISA EUVD lists it as exploited. EPSS 21.0% (higher than 97.6% of CVEs). CVSS 9.6 CRITICAL. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 69.2 of 100.","summary":"Google Chromium V8 Type Confusion Vulnerability","date_published":"2024-08-26T00:00:00.000Z","date_modified":"2026-06-17T08:21:35.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":69.2,"kev":{"dateAdded":"2024-08-26","ransomware":false},"epss":{"score":0.21009,"percentile":0.97566},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-38178#kev","url":"https://patchfirst.co/cve/CVE-2024-38178/","title":"[KEV] CVE-2024-38178: Microsoft Windows Scripting Engine Memory Corruption Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2024-08-13. ENISA EUVD lists it as exploited. EPSS 41.4% (higher than 98.7% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 63.0 of 100.","summary":"Microsoft Windows Scripting Engine Memory Corruption Vulnerability","date_published":"2024-08-13T00:00:00.000Z","date_modified":"2026-06-17T07:39:37.000Z","tags":["kev","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":63,"kev":{"dateAdded":"2024-08-13","ransomware":false},"epss":{"score":0.4138,"percentile":0.98671},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2012-4792#kev","url":"https://patchfirst.co/cve/CVE-2012-4792/","title":"[KEV] CVE-2012-4792: Microsoft Internet Explorer Use-After-Free Vulnerability","content_text":"Microsoft · Internet Explorer. In CISA KEV since 2024-07-23. ENISA EUVD lists it as exploited. EPSS 78.8% (higher than 99.59% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 69.1 of 100.","summary":"Microsoft Internet Explorer Use-After-Free Vulnerability","date_published":"2024-07-23T00:00:00.000Z","date_modified":"2026-06-16T23:45:43.000Z","tags":["kev","public-exploit","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":69.1,"kev":{"dateAdded":"2024-07-23","ransomware":false},"epss":{"score":0.78823,"percentile":0.99591},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Internet Explorer","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-38112#kev","url":"https://patchfirst.co/cve/CVE-2024-38112/","title":"[KEV] CVE-2024-38112: Microsoft Windows MSHTML Platform Spoofing Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2024-07-09. ENISA EUVD lists it as exploited. EPSS 84.2% (higher than 99.7% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1204.001 Malicious Link. Priority 68.2 of 100.","summary":"Microsoft Windows MSHTML Platform Spoofing Vulnerability","date_published":"2024-07-09T00:00:00.000Z","date_modified":"2026-06-17T07:39:26.000Z","tags":["kev","public-exploit","T1189","T1204.001"],"_patchfirst":{"reason":"kev","priority":68.2,"kev":{"dateAdded":"2024-07-09","ransomware":false},"epss":{"score":0.84225,"percentile":0.99696},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1189","T1204.001"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2020-13965#kev","url":"https://patchfirst.co/cve/CVE-2020-13965/","title":"[KEV] CVE-2020-13965: Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability","content_text":"Roundcube · Webmail. In CISA KEV since 2024-06-26. ENISA EUVD lists it as exploited. EPSS 76.6% (higher than 99.54% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 67.2 of 100.","summary":"Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability","date_published":"2024-06-26T00:00:00.000Z","date_modified":"2026-06-17T02:54:01.000Z","tags":["kev","public-exploit","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":67.2,"kev":{"dateAdded":"2024-06-26","ransomware":false},"epss":{"score":0.76596,"percentile":0.99542},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Roundcube","product":"Webmail","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-5274#kev","url":"https://patchfirst.co/cve/CVE-2024-5274/","title":"[KEV] CVE-2024-5274: Google Chromium V8 Type Confusion Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2024-05-28. ENISA EUVD lists it as exploited. EPSS 7.7% (higher than 94.6% of CVEs). CVSS 9.6 CRITICAL. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.6 of 100.","summary":"Google Chromium V8 Type Confusion Vulnerability","date_published":"2024-05-28T00:00:00.000Z","date_modified":"2026-06-17T08:15:35.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":68.6,"kev":{"dateAdded":"2024-05-28","ransomware":false},"epss":{"score":0.0773,"percentile":0.94615},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-4947#kev","url":"https://patchfirst.co/cve/CVE-2024-4947/","title":"[KEV] CVE-2024-4947: Google Chromium V8 Type Confusion Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2024-05-20. ENISA EUVD lists it as exploited. EPSS 15.2% (higher than 96.8% of CVEs). CVSS 9.6 CRITICAL. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 69.1 of 100.","summary":"Google Chromium V8 Type Confusion Vulnerability","date_published":"2024-05-20T00:00:00.000Z","date_modified":"2026-06-17T08:03:15.000Z","tags":["kev","public-exploit","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":69.1,"kev":{"dateAdded":"2024-05-20","ransomware":false},"epss":{"score":0.15236,"percentile":0.96757},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-4671","url":"https://patchfirst.co/cve/CVE-2024-4671/","title":"CVE-2024-4671: Google Chromium Visuals Use-After-Free Vulnerability","content_text":"Google · Chromium. In CISA KEV since 2024-05-13. ENISA EUVD lists it as exploited. EPSS 8.3% (higher than 94.9% of CVEs). CVSS 9.6 CRITICAL. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 63.7 of 100.","summary":"Google Chromium Visuals Use-After-Free Vulnerability","date_published":"2024-05-14T00:00:00.000Z","date_modified":"2026-06-17T08:02:22.000Z","tags":["kev","T1189","T1059"],"_patchfirst":{"reason":"published","priority":63.7,"kev":{"dateAdded":"2024-05-13","ransomware":false},"epss":{"score":0.08348,"percentile":0.94949},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chromium","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-43770#kev","url":"https://patchfirst.co/cve/CVE-2023-43770/","title":"[KEV] CVE-2023-43770: Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability","content_text":"Roundcube · Webmail. In CISA KEV since 2024-02-12. ENISA EUVD lists it as exploited. EPSS 63.7% (higher than 99.22% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter; T1082 System Information Discovery. Priority 67.1 of 100.","summary":"Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability","date_published":"2024-02-12T00:00:00.000Z","date_modified":"2026-06-17T06:26:24.000Z","tags":["kev","public-exploit","T1189","T1059","T1082"],"_patchfirst":{"reason":"kev","priority":67.1,"kev":{"dateAdded":"2024-02-12","ransomware":false},"epss":{"score":0.6366,"percentile":0.99215},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Roundcube","product":"Webmail","techniqueIds":["T1189","T1059","T1082"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-4762#kev","url":"https://patchfirst.co/cve/CVE-2023-4762/","title":"[KEV] CVE-2023-4762: Google Chromium V8 Type Confusion Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2024-02-06. ENISA EUVD lists it as exploited. EPSS 41.4% (higher than 98.7% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 63.9 of 100.","summary":"Google Chromium V8 Type Confusion Vulnerability","date_published":"2024-02-06T00:00:00.000Z","date_modified":"2026-06-17T06:38:32.000Z","tags":["kev","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":63.9,"kev":{"dateAdded":"2024-02-06","ransomware":false},"epss":{"score":0.41375,"percentile":0.9867},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2024-23222#kev","url":"https://patchfirst.co/cve/CVE-2024-23222/","title":"[KEV] CVE-2024-23222: Apple Multiple Products WebKit Type Confusion Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2024-01-23. ENISA EUVD lists it as exploited. EPSS 10.6% (higher than 95.8% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 68.3 of 100.","summary":"Apple Multiple Products WebKit Type Confusion Vulnerability","date_published":"2024-01-23T00:00:00.000Z","date_modified":"2026-06-17T07:12:19.000Z","tags":["kev","public-exploit","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":68.3,"kev":{"dateAdded":"2024-01-23","ransomware":false},"epss":{"score":0.10593,"percentile":0.95777},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-0519#kev","url":"https://patchfirst.co/cve/CVE-2024-0519/","title":"[KEV] CVE-2024-0519: Google Chromium V8 Out-of-Bounds Memory Access Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2024-01-17. ENISA EUVD lists it as exploited. EPSS 3.8% (higher than 90% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 67.2 of 100.","summary":"Google Chromium V8 Out-of-Bounds Memory Access Vulnerability","date_published":"2024-01-17T00:00:00.000Z","date_modified":"2026-06-17T06:53:41.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":67.2,"kev":{"dateAdded":"2024-01-17","ransomware":false},"epss":{"score":0.03802,"percentile":0.89994},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-7024#kev","url":"https://patchfirst.co/cve/CVE-2023-7024/","title":"[KEV] CVE-2023-7024: Google Chromium WebRTC Heap Buffer Overflow Vulnerability","content_text":"Google · Chromium WebRTC. In CISA KEV since 2024-01-02. ENISA EUVD lists it as exploited. EPSS 6.7% (higher than 93.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1574 Hijack Execution Flow. Priority 67.9 of 100.","summary":"Google Chromium WebRTC Heap Buffer Overflow Vulnerability","date_published":"2024-01-02T00:00:00.000Z","date_modified":"2026-06-17T06:51:53.000Z","tags":["kev","public-exploit","T1189","T1574"],"_patchfirst":{"reason":"kev","priority":67.9,"kev":{"dateAdded":"2024-01-02","ransomware":false},"epss":{"score":0.06671,"percentile":0.93883},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium WebRTC","techniqueIds":["T1189","T1574"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-42917#kev","url":"https://patchfirst.co/cve/CVE-2023-42917/","title":"[KEV] CVE-2023-42917: Apple Multiple Products WebKit Memory Corruption Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2023-12-04. ENISA EUVD lists it as exploited. EPSS 9.3% (higher than 95.4% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 63.2 of 100.","summary":"Apple Multiple Products WebKit Memory Corruption Vulnerability","date_published":"2023-12-04T00:00:00.000Z","date_modified":"2026-06-17T06:24:49.000Z","tags":["kev","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":63.2,"kev":{"dateAdded":"2023-12-04","ransomware":false},"epss":{"score":0.09295,"percentile":0.95362},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-42916#kev","url":"https://patchfirst.co/cve/CVE-2023-42916/","title":"[KEV] CVE-2023-42916: Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2023-12-04. ENISA EUVD lists it as exploited. EPSS 17.8% (higher than 97.2% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1005 Data from Local System. Priority 62.0 of 100.","summary":"Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability","date_published":"2023-12-04T00:00:00.000Z","date_modified":"2026-06-17T06:24:49.000Z","tags":["kev","T1189","T1005"],"_patchfirst":{"reason":"kev","priority":62,"kev":{"dateAdded":"2023-12-04","ransomware":false},"epss":{"score":0.17823,"percentile":0.97166},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-41993#kev","url":"https://patchfirst.co/cve/CVE-2023-41993/","title":"[KEV] CVE-2023-41993: Apple Multiple Products WebKit Code Execution Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2023-09-25. ENISA EUVD lists it as exploited. EPSS 24.3% (higher than 97.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 68.7 of 100.","summary":"Apple Multiple Products WebKit Code Execution Vulnerability","date_published":"2023-09-25T00:00:00.000Z","date_modified":"2026-06-17T06:23:13.000Z","tags":["kev","public-exploit","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":68.7,"kev":{"dateAdded":"2023-09-25","ransomware":false},"epss":{"score":0.24349,"percentile":0.97863},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-4863#kev","url":"https://patchfirst.co/cve/CVE-2023-4863/","title":"[KEV] CVE-2023-4863: Google Chromium WebP Heap-Based Buffer Overflow Vulnerability","content_text":"Google · Chromium WebP. In CISA KEV since 2023-09-13. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.98% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 69.2 of 100.","summary":"Google Chromium WebP Heap-Based Buffer Overflow Vulnerability","date_published":"2023-09-13T00:00:00.000Z","date_modified":"2026-06-17T06:38:46.000Z","tags":["kev","public-exploit","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":69.2,"kev":{"dateAdded":"2023-09-13","ransomware":false},"epss":{"score":0.99979,"percentile":0.9998},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium WebP","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}}]}