https://patchfirst.co/technique/T1189/New and newly exploited CVEs that lead to ATT&CK T1189 Drive-by Compromise, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-48356/CVE-2026-48356#kevTue, 27 Oct 2026 00:00:00 GMTAdobe · Commerce and Magento. In CISA KEV since 2026-10-27. ENISA EUVD lists it as exploited. EPSS 44.6% (higher than 98.8% of CVEs). CVSS 9.3 CRITICAL. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 78.3 of 100.kevpublic-exploitT1189T1059https://patchfirst.co/cve/CVE-2026-87491/CVE-2026-87491#kevWed, 09 Sep 2026 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2026-09-09. ENISA EUVD lists it as exploited. EPSS 3.5% (higher than 89.2% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 77.0 of 100.kevpublic-exploitT1189T1059https://patchfirst.co/cve/CVE-2026-85046/CVE-2026-85046#kevFri, 04 Sep 2026 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2026-09-04. ENISA EUVD lists it as exploited. EPSS 1.8% (higher than 78.5% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 74.9 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2025-62593/CVE-2025-62593#kevMon, 17 Aug 2026 00:00:00 GMTRay-Project · Ray. In CISA KEV since 2026-08-17. ENISA EUVD lists it as exploited. EPSS 60.2% (higher than 99.13% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 74.0 of 100.kevpublic-exploitT1189T1059https://patchfirst.co/cve/CVE-2026-11645/CVE-2026-11645#kevTue, 09 Jun 2026 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2026-06-09. ENISA EUVD lists it as exploited. EPSS 2.4% (higher than 84.3% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 71.0 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2009-1537/CVE-2009-1537#kevWed, 20 May 2026 00:00:00 GMTMicrosoft · DirectX. In CISA KEV since 2026-05-20. ENISA EUVD lists it as exploited. EPSS 51.4% (higher than 98.9% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 63.9 of 100.kevT1189T1059https://patchfirst.co/cve/CVE-2010-0249/CVE-2010-0249#kevWed, 20 May 2026 00:00:00 GMTMicrosoft · Internet Explorer. In CISA KEV since 2026-05-20. ENISA EUVD lists it as exploited. EPSS 91.9% (higher than 99.82% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 54.1 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2010-0806/CVE-2010-0806#kevWed, 20 May 2026 00:00:00 GMTMicrosoft · Internet Explorer. In CISA KEV since 2026-05-20. ENISA EUVD lists it as exploited. EPSS 82.2% (higher than 99.66% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 54.1 of 100.kevpublic-exploitT1189T1059https://patchfirst.co/cve/CVE-2026-42897/CVE-2026-42897#kevFri, 15 May 2026 00:00:00 GMTMicrosoft · Microsoft. In CISA KEV since 2026-05-15. ENISA EUVD lists it as exploited. EPSS 70.7% (higher than 99.39% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript. Priority 72.1 of 100.kevpublic-exploitT1189T1059.007https://patchfirst.co/cve/CVE-2026-5281/CVE-2026-5281#kevWed, 01 Apr 2026 00:00:00 GMTGoogle · Dawn. In CISA KEV since 2026-04-01. ENISA EUVD lists it as exploited. EPSS 13.7% (higher than 96.5% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 73.5 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2025-31277/CVE-2025-31277#kevFri, 20 Mar 2026 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2026-03-20. ENISA EUVD lists it as exploited. EPSS 1.7% (higher than 76.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 69.5 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2026-3909/CVE-2026-3909#kevFri, 13 Mar 2026 00:00:00 GMTGoogle · Skia. In CISA KEV since 2026-03-13. ENISA EUVD lists it as exploited. EPSS 2.3% (higher than 83.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 70.9 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2026-3910/CVE-2026-3910#kevFri, 13 Mar 2026 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2026-03-13. ENISA EUVD lists it as exploited. EPSS 2.7% (higher than 85.9% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 66.3 of 100.kevT1189T1059https://patchfirst.co/cve/CVE-2021-30952/CVE-2021-30952#kevThu, 05 Mar 2026 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2026-03-05. ENISA EUVD lists it as exploited. EPSS 7.0% (higher than 94.1% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 72.3 of 100.kevpublic-exploitT1189T1059https://patchfirst.co/cve/CVE-2023-43000/CVE-2023-43000#kevThu, 05 Mar 2026 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2026-03-05. ENISA EUVD lists it as exploited. EPSS 4.0% (higher than 90.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 72.3 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2026-2441/CVE-2026-2441#kevTue, 17 Feb 2026 00:00:00 GMTGoogle · Chromium. In CISA KEV since 2026-02-17. ENISA EUVD lists it as exploited. EPSS 55.0% (higher than 99.02% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 74.0 of 100.kevpublic-exploitT1189T1059https://patchfirst.co/cve/CVE-2008-0015/CVE-2008-0015#kevTue, 17 Feb 2026 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2026-02-17. ENISA EUVD lists it as exploited. EPSS 76.6% (higher than 99.54% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 69.1 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2026-21513/CVE-2026-21513#kevTue, 10 Feb 2026 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2026-02-10. ENISA EUVD lists it as exploited. EPSS 15.9% (higher than 96.9% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1553 Subvert Trust Controls. Priority 68.5 of 100.kevT1189T1553https://patchfirst.co/cve/CVE-2025-43529/CVE-2025-43529Wed, 17 Dec 2025 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2025-12-15. ENISA EUVD lists it as exploited. EPSS 25.7% (higher than 98% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 73.8 of 100.kevpublic-exploitT1189T1059https://patchfirst.co/cve/CVE-2025-14174/CVE-2025-14174#kevFri, 12 Dec 2025 00:00:00 GMTGoogle · Chromium. In CISA KEV since 2025-12-12. ENISA EUVD lists it as exploited. EPSS 55.3% (higher than 99.03% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 74.0 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2025-13223/CVE-2025-13223#kevWed, 19 Nov 2025 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2025-11-19. ENISA EUVD lists it as exploited. EPSS 4.9% (higher than 92.1% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 67.6 of 100.kevT1189T1059https://patchfirst.co/cve/CVE-2022-48503/CVE-2022-48503#kevMon, 20 Oct 2025 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2025-10-20. ENISA EUVD lists it as exploited. EPSS 3.2% (higher than 88.2% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 61.8 of 100.kevT1189T1059https://patchfirst.co/cve/CVE-2013-3918/CVE-2013-3918#kevMon, 06 Oct 2025 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2025-10-06. ENISA EUVD lists it as exploited. EPSS 73.7% (higher than 99.47% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution; T1499 Endpoint Denial of Service. Named in 1 threat report. Priority 72.9 of 100.kevpublic-exploitT1189T1203T1499https://patchfirst.co/cve/CVE-2013-3893/CVE-2013-3893#kevTue, 12 Aug 2025 00:00:00 GMTMicrosoft · Internet Explorer. In CISA KEV since 2025-08-12. ENISA EUVD lists it as exploited. EPSS 87.6% (higher than 99.76% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript. Priority 54.1 of 100.kevpublic-exploitT1189T1059.007https://patchfirst.co/cve/CVE-2025-6558/CVE-2025-6558#kevTue, 22 Jul 2025 00:00:00 GMTGoogle · Chromium. In CISA KEV since 2025-07-22. ENISA EUVD lists it as exploited. EPSS 10.9% (higher than 95.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution; T1497 Virtualization/Sandbox Evasion. Priority 68.3 of 100.kevpublic-exploitT1189T1203T1497https://patchfirst.co/cve/CVE-2025-6554/CVE-2025-6554#kevWed, 02 Jul 2025 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2025-07-02. ENISA EUVD lists it as exploited. EPSS 14.1% (higher than 96.6% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution; T1059 Command and Scripting Interpreter. Priority 68.0 of 100.kevpublic-exploitT1189T1203T1059https://patchfirst.co/cve/CVE-2025-5419/CVE-2025-5419#kevThu, 05 Jun 2025 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2025-06-05. ENISA EUVD lists it as exploited. EPSS 7.5% (higher than 94.5% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.1 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2024-44308/CVE-2024-44308#kevThu, 21 Nov 2024 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2024-11-21. ENISA EUVD lists it as exploited. EPSS 9.9% (higher than 95.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.3 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2024-44309/CVE-2024-44309#kevThu, 21 Nov 2024 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2024-11-21. ENISA EUVD lists it as exploited. EPSS 21.9% (higher than 97.7% of CVEs). CVSS 6.3 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 61.9 of 100.kevT1189T1059https://patchfirst.co/cve/CVE-2014-0502/CVE-2014-0502#kevTue, 17 Sep 2024 00:00:00 GMTAdobe · Flash Player. In CISA KEV since 2024-09-17. ENISA EUVD lists it as exploited. EPSS 24.8% (higher than 97.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.7 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2013-0643/CVE-2013-0643#kevTue, 17 Sep 2024 00:00:00 GMTAdobe · Flash Player. In CISA KEV since 2024-09-17. ENISA EUVD lists it as exploited. EPSS 10.5% (higher than 95.8% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 48.3 of 100.kevT1189T1059https://patchfirst.co/cve/CVE-2013-0648/CVE-2013-0648#kevTue, 17 Sep 2024 00:00:00 GMTAdobe · Flash Player. In CISA KEV since 2024-09-17. ENISA EUVD lists it as exploited. EPSS 11.1% (higher than 95.9% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 48.3 of 100.kevT1189T1059https://patchfirst.co/cve/CVE-2024-7965/CVE-2024-7965#kevWed, 28 Aug 2024 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2024-08-28. ENISA EUVD lists it as exploited. EPSS 18.5% (higher than 97.2% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.6 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2024-7971/CVE-2024-7971#kevMon, 26 Aug 2024 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2024-08-26. ENISA EUVD lists it as exploited. EPSS 21.0% (higher than 97.6% of CVEs). CVSS 9.6 CRITICAL. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 69.2 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2024-38178/CVE-2024-38178#kevTue, 13 Aug 2024 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2024-08-13. ENISA EUVD lists it as exploited. EPSS 41.4% (higher than 98.7% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 63.0 of 100.kevT1189T1059https://patchfirst.co/cve/CVE-2012-4792/CVE-2012-4792#kevTue, 23 Jul 2024 00:00:00 GMTMicrosoft · Internet Explorer. In CISA KEV since 2024-07-23. ENISA EUVD lists it as exploited. EPSS 78.8% (higher than 99.59% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 69.1 of 100.kevpublic-exploitT1189T1059https://patchfirst.co/cve/CVE-2024-38112/CVE-2024-38112#kevTue, 09 Jul 2024 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2024-07-09. ENISA EUVD lists it as exploited. EPSS 84.2% (higher than 99.7% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1204.001 Malicious Link. Priority 68.2 of 100.kevpublic-exploitT1189T1204.001https://patchfirst.co/cve/CVE-2020-13965/CVE-2020-13965#kevWed, 26 Jun 2024 00:00:00 GMTRoundcube · Webmail. In CISA KEV since 2024-06-26. ENISA EUVD lists it as exploited. EPSS 76.6% (higher than 99.54% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 67.2 of 100.kevpublic-exploitT1189T1059https://patchfirst.co/cve/CVE-2024-5274/CVE-2024-5274#kevTue, 28 May 2024 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2024-05-28. ENISA EUVD lists it as exploited. EPSS 7.7% (higher than 94.6% of CVEs). CVSS 9.6 CRITICAL. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.6 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2024-4947/CVE-2024-4947#kevMon, 20 May 2024 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2024-05-20. ENISA EUVD lists it as exploited. EPSS 15.2% (higher than 96.8% of CVEs). CVSS 9.6 CRITICAL. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 69.1 of 100.kevpublic-exploitT1189T1059https://patchfirst.co/cve/CVE-2024-4671/CVE-2024-4671Tue, 14 May 2024 00:00:00 GMTGoogle · Chromium. In CISA KEV since 2024-05-13. ENISA EUVD lists it as exploited. EPSS 8.3% (higher than 94.9% of CVEs). CVSS 9.6 CRITICAL. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 63.7 of 100.kevT1189T1059https://patchfirst.co/cve/CVE-2023-43770/CVE-2023-43770#kevMon, 12 Feb 2024 00:00:00 GMTRoundcube · Webmail. In CISA KEV since 2024-02-12. ENISA EUVD lists it as exploited. EPSS 63.7% (higher than 99.22% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter; T1082 System Information Discovery. Priority 67.1 of 100.kevpublic-exploitT1189T1059T1082https://patchfirst.co/cve/CVE-2023-4762/CVE-2023-4762#kevTue, 06 Feb 2024 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2024-02-06. ENISA EUVD lists it as exploited. EPSS 41.4% (higher than 98.7% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 63.9 of 100.kevT1189T1059https://patchfirst.co/cve/CVE-2024-23222/CVE-2024-23222#kevTue, 23 Jan 2024 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2024-01-23. ENISA EUVD lists it as exploited. EPSS 10.6% (higher than 95.8% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 68.3 of 100.kevpublic-exploitT1189T1059https://patchfirst.co/cve/CVE-2024-0519/CVE-2024-0519#kevWed, 17 Jan 2024 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2024-01-17. ENISA EUVD lists it as exploited. EPSS 3.8% (higher than 90% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 67.2 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2023-7024/CVE-2023-7024#kevTue, 02 Jan 2024 00:00:00 GMTGoogle · Chromium WebRTC. In CISA KEV since 2024-01-02. ENISA EUVD lists it as exploited. EPSS 6.7% (higher than 93.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1574 Hijack Execution Flow. Priority 67.9 of 100.kevpublic-exploitT1189T1574https://patchfirst.co/cve/CVE-2023-42917/CVE-2023-42917#kevMon, 04 Dec 2023 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2023-12-04. ENISA EUVD lists it as exploited. EPSS 9.3% (higher than 95.4% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 63.2 of 100.kevT1189T1059https://patchfirst.co/cve/CVE-2023-42916/CVE-2023-42916#kevMon, 04 Dec 2023 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2023-12-04. ENISA EUVD lists it as exploited. EPSS 17.8% (higher than 97.2% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1005 Data from Local System. Priority 62.0 of 100.kevT1189T1005https://patchfirst.co/cve/CVE-2023-41993/CVE-2023-41993#kevMon, 25 Sep 2023 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2023-09-25. ENISA EUVD lists it as exploited. EPSS 24.3% (higher than 97.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 68.7 of 100.kevpublic-exploitT1189T1059https://patchfirst.co/cve/CVE-2023-4863/CVE-2023-4863#kevWed, 13 Sep 2023 00:00:00 GMTGoogle · Chromium WebP. In CISA KEV since 2023-09-13. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.98% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 69.2 of 100.kevpublic-exploitT1189T1059