{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: CVEs linked to T1203 Exploitation for Client Execution","home_page_url":"https://patchfirst.co/technique/T1203/","feed_url":"https://patchfirst.co/feed/technique/T1203.json","description":"New and newly exploited CVEs that lead to ATT&CK T1203 Exploitation for Client Execution, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-85046#kev","url":"https://patchfirst.co/cve/CVE-2026-85046/","title":"[KEV] CVE-2026-85046: Google Chromium V8 Type Confusion Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2026-09-04. ENISA EUVD lists it as exploited. EPSS 1.8% (higher than 78.5% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 74.9 of 100.","summary":"Google Chromium V8 Type Confusion Vulnerability","date_published":"2026-09-04T00:00:00.000Z","date_modified":"2026-09-21T13:17:10.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":74.9,"kev":{"dateAdded":"2026-09-04","ransomware":false},"epss":{"score":0.01806,"percentile":0.78543},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-11645#kev","url":"https://patchfirst.co/cve/CVE-2026-11645/","title":"[KEV] CVE-2026-11645: Google Chromium V8 Out-of-Bounds Read and Write Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2026-06-09. ENISA EUVD lists it as exploited. EPSS 2.4% (higher than 84.3% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 71.0 of 100.","summary":"Google Chromium V8 Out-of-Bounds Read and Write Vulnerability","date_published":"2026-06-09T00:00:00.000Z","date_modified":"2026-07-23T08:10:00.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":71,"kev":{"dateAdded":"2026-06-09","ransomware":false},"epss":{"score":0.0244,"percentile":0.84285},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2009-3459#kev","url":"https://patchfirst.co/cve/CVE-2009-3459/","title":"[KEV] CVE-2009-3459: Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability","content_text":"Adobe · Acrobat and Reader. In CISA KEV since 2026-05-20. ENISA EUVD lists it as exploited. EPSS 86.6% (higher than 99.74% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1203 Exploitation for Client Execution; T1204.002 Malicious File. Priority 69.1 of 100.","summary":"Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability","date_published":"2026-05-20T00:00:00.000Z","date_modified":"2026-06-16T23:11:38.000Z","tags":["kev","public-exploit","T1203","T1204.002"],"_patchfirst":{"reason":"kev","priority":69.1,"kev":{"dateAdded":"2026-05-20","ransomware":false},"epss":{"score":0.86646,"percentile":0.9974},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Adobe","product":"Acrobat and Reader","techniqueIds":["T1203","T1204.002"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2010-0249#kev","url":"https://patchfirst.co/cve/CVE-2010-0249/","title":"[KEV] CVE-2010-0249: Microsoft Internet Explorer Use-After-Free Vulnerability","content_text":"Microsoft · Internet Explorer. In CISA KEV since 2026-05-20. ENISA EUVD lists it as exploited. EPSS 91.9% (higher than 99.82% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 54.1 of 100.","summary":"Microsoft Internet Explorer Use-After-Free Vulnerability","date_published":"2026-05-20T00:00:00.000Z","date_modified":"2026-06-16T23:15:47.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":54.1,"kev":{"dateAdded":"2026-05-20","ransomware":false},"epss":{"score":0.91939,"percentile":0.99818},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Internet Explorer","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2020-9715#kev","url":"https://patchfirst.co/cve/CVE-2020-9715/","title":"[KEV] CVE-2020-9715: Adobe Acrobat Use-After-Free Vulnerability","content_text":"Adobe · Acrobat. In CISA KEV since 2026-04-13. ENISA EUVD lists it as exploited. EPSS 33.5% (higher than 98.4% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1203 Exploitation for Client Execution. Priority 73.1 of 100.","summary":"Adobe Acrobat Use-After-Free Vulnerability","date_published":"2026-04-13T00:00:00.000Z","date_modified":"2026-06-17T03:28:26.000Z","tags":["kev","public-exploit","T1204.002","T1203"],"_patchfirst":{"reason":"kev","priority":73.1,"kev":{"dateAdded":"2026-04-13","ransomware":false},"epss":{"score":0.33491,"percentile":0.98377},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Adobe","product":"Acrobat","techniqueIds":["T1204.002","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-34621#kev","url":"https://patchfirst.co/cve/CVE-2026-34621/","title":"[KEV] CVE-2026-34621: Adobe Acrobat and Reader Prototype Pollution Vulnerability","content_text":"Adobe · Acrobat and Reader. In CISA KEV since 2026-04-13. ENISA EUVD lists it as exploited. EPSS 7.2% (higher than 94.3% of CVEs). CVSS 8.6 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1203 Exploitation for Client Execution. Priority 72.9 of 100.","summary":"Adobe Acrobat and Reader Prototype Pollution Vulnerability","date_published":"2026-04-13T00:00:00.000Z","date_modified":"2026-10-26T21:10:00.000Z","tags":["kev","public-exploit","T1204.002","T1203"],"_patchfirst":{"reason":"kev","priority":72.9,"kev":{"dateAdded":"2026-04-13","ransomware":false},"epss":{"score":0.0723,"percentile":0.94317},"cvss":{"score":8.6,"severity":"HIGH","version":"3.1"},"vendor":"Adobe","product":"Acrobat and Reader","techniqueIds":["T1204.002","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-5281#kev","url":"https://patchfirst.co/cve/CVE-2026-5281/","title":"[KEV] CVE-2026-5281: Google Dawn Use-After-Free Vulnerability","content_text":"Google · Dawn. In CISA KEV since 2026-04-01. ENISA EUVD lists it as exploited. EPSS 13.7% (higher than 96.5% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 73.5 of 100.","summary":"Google Dawn Use-After-Free Vulnerability","date_published":"2026-04-01T00:00:00.000Z","date_modified":"2026-07-24T21:10:00.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":73.5,"kev":{"dateAdded":"2026-04-01","ransomware":false},"epss":{"score":0.13743,"percentile":0.96505},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Dawn","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-31277#kev","url":"https://patchfirst.co/cve/CVE-2025-31277/","title":"[KEV] CVE-2025-31277: Apple Multiple Products Buffer Overflow Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2026-03-20. ENISA EUVD lists it as exploited. EPSS 1.7% (higher than 76.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 69.5 of 100.","summary":"Apple Multiple Products Buffer Overflow Vulnerability","date_published":"2026-03-20T00:00:00.000Z","date_modified":"2026-09-21T17:17:25.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":69.5,"kev":{"dateAdded":"2026-03-20","ransomware":false},"epss":{"score":0.01678,"percentile":0.7688},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-3909#kev","url":"https://patchfirst.co/cve/CVE-2026-3909/","title":"[KEV] CVE-2026-3909: Google Skia Out-of-Bounds Write Vulnerability","content_text":"Google · Skia. In CISA KEV since 2026-03-13. ENISA EUVD lists it as exploited. EPSS 2.3% (higher than 83.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 70.9 of 100.","summary":"Google Skia Out-of-Bounds Write Vulnerability","date_published":"2026-03-13T00:00:00.000Z","date_modified":"2026-06-17T10:44:24.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":70.9,"kev":{"dateAdded":"2026-03-13","ransomware":false},"epss":{"score":0.02342,"percentile":0.83618},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Skia","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-43000#kev","url":"https://patchfirst.co/cve/CVE-2023-43000/","title":"[KEV] CVE-2023-43000: Apple Multiple products Use-After-Free Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2026-03-05. ENISA EUVD lists it as exploited. EPSS 4.0% (higher than 90.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 72.3 of 100.","summary":"Apple Multiple products Use-After-Free Vulnerability","date_published":"2026-03-05T00:00:00.000Z","date_modified":"2026-10-28T19:10:00.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":72.3,"kev":{"dateAdded":"2026-03-05","ransomware":false},"epss":{"score":0.04042,"percentile":0.90606},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2008-0015#kev","url":"https://patchfirst.co/cve/CVE-2008-0015/","title":"[KEV] CVE-2008-0015: Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2026-02-17. ENISA EUVD lists it as exploited. EPSS 76.6% (higher than 99.54% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 69.1 of 100.","summary":"Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability","date_published":"2026-02-17T00:00:00.000Z","date_modified":"2026-06-16T22:48:45.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":69.1,"kev":{"dateAdded":"2026-02-17","ransomware":false},"epss":{"score":0.76576,"percentile":0.99542},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-14174#kev","url":"https://patchfirst.co/cve/CVE-2025-14174/","title":"[KEV] CVE-2025-14174: Google Chromium Out of Bounds Memory Access Vulnerability","content_text":"Google · Chromium. In CISA KEV since 2025-12-12. ENISA EUVD lists it as exploited. EPSS 55.3% (higher than 99.03% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 74.0 of 100.","summary":"Google Chromium Out of Bounds Memory Access Vulnerability","date_published":"2025-12-12T00:00:00.000Z","date_modified":"2026-10-07T20:10:01.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":74,"kev":{"dateAdded":"2025-12-12","ransomware":false},"epss":{"score":0.55334,"percentile":0.9903},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2011-3402#kev","url":"https://patchfirst.co/cve/CVE-2011-3402/","title":"[KEV] CVE-2011-3402: Microsoft Windows Remote Code Execution Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2025-10-06. ENISA EUVD lists it as exploited. EPSS 78.1% (higher than 99.58% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1203 Exploitation for Client Execution. Priority 79.1 of 100.","summary":"Microsoft Windows Remote Code Execution Vulnerability","date_published":"2025-10-06T00:00:00.000Z","date_modified":"2026-06-16T23:33:14.000Z","tags":["kev","public-exploit","T1204.002","T1203"],"_patchfirst":{"reason":"kev","priority":79.1,"kev":{"dateAdded":"2025-10-06","ransomware":false},"epss":{"score":0.78138,"percentile":0.99577},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1204.002","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2013-3918#kev","url":"https://patchfirst.co/cve/CVE-2013-3918/","title":"[KEV] CVE-2013-3918: Microsoft Windows Out-of-Bounds Write Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2025-10-06. ENISA EUVD lists it as exploited. EPSS 73.7% (higher than 99.47% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution; T1499 Endpoint Denial of Service. Named in 1 threat report. Priority 72.9 of 100.","summary":"Microsoft Windows Out-of-Bounds Write Vulnerability","date_published":"2025-10-06T00:00:00.000Z","date_modified":"2026-06-16T23:56:01.000Z","tags":["kev","public-exploit","T1189","T1203","T1499"],"_patchfirst":{"reason":"kev","priority":72.9,"kev":{"dateAdded":"2025-10-06","ransomware":false},"epss":{"score":0.73693,"percentile":0.99472},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1189","T1203","T1499"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2007-0671#kev","url":"https://patchfirst.co/cve/CVE-2007-0671/","title":"[KEV] CVE-2007-0671: Microsoft Office Excel Remote Code Execution Vulnerability","content_text":"Microsoft · Office. In CISA KEV since 2025-08-12. ENISA EUVD lists it as exploited. EPSS 43.2% (higher than 98.7% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1204.002 Malicious File; T1203 Exploitation for Client Execution. Priority 63.9 of 100.","summary":"Microsoft Office Excel Remote Code Execution Vulnerability","date_published":"2025-08-12T00:00:00.000Z","date_modified":"2026-06-16T22:36:02.000Z","tags":["kev","T1204.002","T1203"],"_patchfirst":{"reason":"kev","priority":63.9,"kev":{"dateAdded":"2025-08-12","ransomware":false},"epss":{"score":0.43241,"percentile":0.98725},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Office","techniqueIds":["T1204.002","T1203"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2025-6558#kev","url":"https://patchfirst.co/cve/CVE-2025-6558/","title":"[KEV] CVE-2025-6558: Google Chromium ANGLE and GPU Improper Input Validation Vulnerability","content_text":"Google · Chromium. In CISA KEV since 2025-07-22. ENISA EUVD lists it as exploited. EPSS 10.9% (higher than 95.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution; T1497 Virtualization/Sandbox Evasion. Priority 68.3 of 100.","summary":"Google Chromium ANGLE and GPU Improper Input Validation Vulnerability","date_published":"2025-07-22T00:00:00.000Z","date_modified":"2026-10-01T12:00:53.000Z","tags":["kev","public-exploit","T1189","T1203","T1497"],"_patchfirst":{"reason":"kev","priority":68.3,"kev":{"dateAdded":"2025-07-22","ransomware":false},"epss":{"score":0.10927,"percentile":0.95873},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium","techniqueIds":["T1189","T1203","T1497"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-6554#kev","url":"https://patchfirst.co/cve/CVE-2025-6554/","title":"[KEV] CVE-2025-6554: Google Chromium V8 Type Confusion Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2025-07-02. ENISA EUVD lists it as exploited. EPSS 14.1% (higher than 96.6% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution; T1059 Command and Scripting Interpreter. Priority 68.0 of 100.","summary":"Google Chromium V8 Type Confusion Vulnerability","date_published":"2025-07-02T00:00:00.000Z","date_modified":"2026-06-17T10:02:08.000Z","tags":["kev","public-exploit","T1189","T1203","T1059"],"_patchfirst":{"reason":"kev","priority":68,"kev":{"dateAdded":"2025-07-02","ransomware":false},"epss":{"score":0.14142,"percentile":0.96571},"cvss":{"score":8.1,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1203","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-43200#kev","url":"https://patchfirst.co/cve/CVE-2025-43200/","title":"[KEV] CVE-2025-43200: Apple Multiple Products Unspecified Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2025-06-16. ENISA EUVD lists it as exploited. EPSS 1.2% (higher than 67.9% of CVEs). CVSS 4.2 MEDIUM. ATT&CK: T1203 Exploitation for Client Execution; T1105 Ingress Tool Transfer; T1005 Data from Local System. Priority 54.5 of 100.","summary":"Apple Multiple Products Unspecified Vulnerability","date_published":"2025-06-16T00:00:00.000Z","date_modified":"2026-09-24T13:10:00.000Z","tags":["kev","T1203","T1105","T1005"],"_patchfirst":{"reason":"kev","priority":54.5,"kev":{"dateAdded":"2025-06-16","ransomware":false},"epss":{"score":0.01191,"percentile":0.67933},"cvss":{"score":4.2,"severity":"MEDIUM","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1203","T1105","T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2025-5419#kev","url":"https://patchfirst.co/cve/CVE-2025-5419/","title":"[KEV] CVE-2025-5419: Google Chromium V8 Out-of-Bounds Read and Write Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2025-06-05. ENISA EUVD lists it as exploited. EPSS 7.5% (higher than 94.5% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.1 of 100.","summary":"Google Chromium V8 Out-of-Bounds Read and Write Vulnerability","date_published":"2025-06-05T00:00:00.000Z","date_modified":"2026-06-17T09:47:52.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":68.1,"kev":{"dateAdded":"2025-06-05","ransomware":false},"epss":{"score":0.07486,"percentile":0.9447},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-27038#kev","url":"https://patchfirst.co/cve/CVE-2025-27038/","title":"[KEV] CVE-2025-27038: Qualcomm Multiple Chipsets Use-After-Free Vulnerability","content_text":"Qualcomm · Multiple Chipsets. In CISA KEV since 2025-06-03. ENISA EUVD lists it as exploited. EPSS 1.0% (higher than 64.1% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1203 Exploitation for Client Execution; T1059 Command and Scripting Interpreter. Priority 56.1 of 100.","summary":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","date_published":"2025-06-03T00:00:00.000Z","date_modified":"2026-06-17T09:02:48.000Z","tags":["kev","T1203","T1059"],"_patchfirst":{"reason":"kev","priority":56.1,"kev":{"dateAdded":"2025-06-03","ransomware":false},"epss":{"score":0.01044,"percentile":0.64082},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Qualcomm","product":"Multiple Chipsets","techniqueIds":["T1203","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2025-30397#kev","url":"https://patchfirst.co/cve/CVE-2025-30397/","title":"[KEV] CVE-2025-30397: Microsoft Windows Scripting Engine Type Confusion Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2025-05-13. ENISA EUVD lists it as exploited. EPSS 27.3% (higher than 98.1% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1203 Exploitation for Client Execution; T1059 Command and Scripting Interpreter. Priority 67.9 of 100.","summary":"Microsoft Windows Scripting Engine Type Confusion Vulnerability","date_published":"2025-05-13T00:00:00.000Z","date_modified":"2026-06-17T09:08:38.000Z","tags":["kev","public-exploit","T1203","T1059"],"_patchfirst":{"reason":"kev","priority":67.9,"kev":{"dateAdded":"2025-05-13","ransomware":false},"epss":{"score":0.27263,"percentile":0.98056},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1203","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-2783#kev","url":"https://patchfirst.co/cve/CVE-2025-2783/","title":"[KEV] CVE-2025-2783: Google Chromium Mojo Sandbox Escape Vulnerability","content_text":"Google · Chromium Mojo. In CISA KEV since 2025-03-27. ENISA EUVD lists it as exploited. EPSS 9.2% (higher than 95.3% of CVEs). CVSS 8.3 HIGH. Public exploit code exists. ATT&CK: T1203 Exploitation for Client Execution; T1548 Abuse Elevation Control Mechanism; T1497 Virtualization/Sandbox Evasion. Priority 67.9 of 100.","summary":"Google Chromium Mojo Sandbox Escape Vulnerability","date_published":"2025-03-27T00:00:00.000Z","date_modified":"2026-06-17T09:07:37.000Z","tags":["kev","public-exploit","T1203","T1548","T1497"],"_patchfirst":{"reason":"kev","priority":67.9,"kev":{"dateAdded":"2025-03-27","ransomware":false},"epss":{"score":0.09238,"percentile":0.95345},"cvss":{"score":8.3,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium Mojo","techniqueIds":["T1203","T1548","T1497"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-24993#kev","url":"https://patchfirst.co/cve/CVE-2025-24993/","title":"[KEV] CVE-2025-24993: Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2025-03-11. ENISA EUVD lists it as exploited. EPSS 2.2% (higher than 82.6% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1203 Exploitation for Client Execution; T1204 User Execution; T1055 Process Injection; T1565 Data Manipulation. Priority 60.0 of 100.","summary":"Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability","date_published":"2025-03-11T00:00:00.000Z","date_modified":"2026-09-24T13:10:00.000Z","tags":["kev","T1068","T1203","T1204","T1055","T1565"],"_patchfirst":{"reason":"kev","priority":60,"kev":{"dateAdded":"2025-03-11","ransomware":false},"epss":{"score":0.02216,"percentile":0.82616},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1068","T1203","T1204","T1055","T1565"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2022-23748#kev","url":"https://patchfirst.co/cve/CVE-2022-23748/","title":"[KEV] CVE-2022-23748: Dante Discovery Process Control Vulnerability","content_text":"Audinate · Dante Discovery. In CISA KEV since 2025-02-06. ENISA EUVD lists it as exploited. EPSS 8.3% (higher than 94.9% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1059 Command and Scripting Interpreter; T1203 Exploitation for Client Execution. Priority 62.4 of 100.","summary":"Dante Discovery Process Control Vulnerability","date_published":"2025-02-06T00:00:00.000Z","date_modified":"2026-06-17T04:30:45.000Z","tags":["kev","T1059","T1203"],"_patchfirst":{"reason":"kev","priority":62.4,"kev":{"dateAdded":"2025-02-06","ransomware":false},"epss":{"score":0.08329,"percentile":0.94942},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Audinate","product":"Dante Discovery","techniqueIds":["T1059","T1203"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2024-44308#kev","url":"https://patchfirst.co/cve/CVE-2024-44308/","title":"[KEV] CVE-2024-44308: Apple Multiple Products Code Execution Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2024-11-21. ENISA EUVD lists it as exploited. EPSS 9.9% (higher than 95.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.3 of 100.","summary":"Apple Multiple Products Code Execution Vulnerability","date_published":"2024-11-21T00:00:00.000Z","date_modified":"2026-06-17T07:52:45.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":68.3,"kev":{"dateAdded":"2024-11-21","ransomware":false},"epss":{"score":0.09852,"percentile":0.95556},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2014-0502#kev","url":"https://patchfirst.co/cve/CVE-2014-0502/","title":"[KEV] CVE-2014-0502: Adobe Flash Player Double Free Vulnerablity","content_text":"Adobe · Flash Player. In CISA KEV since 2024-09-17. ENISA EUVD lists it as exploited. EPSS 24.8% (higher than 97.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.7 of 100.","summary":"Adobe Flash Player Double Free Vulnerablity","date_published":"2024-09-17T00:00:00.000Z","date_modified":"2026-06-17T00:03:09.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":68.7,"kev":{"dateAdded":"2024-09-17","ransomware":false},"epss":{"score":0.24817,"percentile":0.97901},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Adobe","product":"Flash Player","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-7965#kev","url":"https://patchfirst.co/cve/CVE-2024-7965/","title":"[KEV] CVE-2024-7965: Google Chromium V8 Inappropriate Implementation Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2024-08-28. ENISA EUVD lists it as exploited. EPSS 18.5% (higher than 97.2% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.6 of 100.","summary":"Google Chromium V8 Inappropriate Implementation Vulnerability","date_published":"2024-08-28T00:00:00.000Z","date_modified":"2026-06-17T08:21:34.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":68.6,"kev":{"dateAdded":"2024-08-28","ransomware":false},"epss":{"score":0.18528,"percentile":0.97246},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-7971#kev","url":"https://patchfirst.co/cve/CVE-2024-7971/","title":"[KEV] CVE-2024-7971: Google Chromium V8 Type Confusion Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2024-08-26. ENISA EUVD lists it as exploited. EPSS 21.0% (higher than 97.6% of CVEs). CVSS 9.6 CRITICAL. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 69.2 of 100.","summary":"Google Chromium V8 Type Confusion Vulnerability","date_published":"2024-08-26T00:00:00.000Z","date_modified":"2026-06-17T08:21:35.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":69.2,"kev":{"dateAdded":"2024-08-26","ransomware":false},"epss":{"score":0.21009,"percentile":0.97566},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2018-0824#kev","url":"https://patchfirst.co/cve/CVE-2018-0824/","title":"[KEV] CVE-2018-0824: Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2024-08-05. ENISA EUVD lists it as exploited. EPSS 73.0% (higher than 99.45% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1203 Exploitation for Client Execution; T1059 Command and Scripting Interpreter. Priority 69.1 of 100.","summary":"Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability","date_published":"2024-08-05T00:00:00.000Z","date_modified":"2026-06-17T01:31:44.000Z","tags":["kev","public-exploit","T1203","T1059"],"_patchfirst":{"reason":"kev","priority":69.1,"kev":{"dateAdded":"2024-08-05","ransomware":false},"epss":{"score":0.73037,"percentile":0.99454},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1203","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-26169#kev","url":"https://patchfirst.co/cve/CVE-2024-26169/","title":"[KEV] CVE-2024-26169: Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2024-06-13, known ransomware use. ENISA EUVD lists it as exploited. EPSS 4.0% (higher than 90.5% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1112 Modify Registry; T1203 Exploitation for Client Execution; T1059 Command and Scripting Interpreter. Priority 71.6 of 100.","summary":"Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability","date_published":"2024-06-13T00:00:00.000Z","date_modified":"2026-06-17T07:17:15.000Z","tags":["kev","ransomware","T1112","T1203","T1059"],"_patchfirst":{"reason":"kev","priority":71.6,"kev":{"dateAdded":"2024-06-13","ransomware":true},"epss":{"score":0.03981,"percentile":0.90477},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1112","T1203","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2024-5274#kev","url":"https://patchfirst.co/cve/CVE-2024-5274/","title":"[KEV] CVE-2024-5274: Google Chromium V8 Type Confusion Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2024-05-28. ENISA EUVD lists it as exploited. EPSS 7.7% (higher than 94.6% of CVEs). CVSS 9.6 CRITICAL. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.6 of 100.","summary":"Google Chromium V8 Type Confusion Vulnerability","date_published":"2024-05-28T00:00:00.000Z","date_modified":"2026-06-17T08:15:35.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":68.6,"kev":{"dateAdded":"2024-05-28","ransomware":false},"epss":{"score":0.0773,"percentile":0.94615},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-0519#kev","url":"https://patchfirst.co/cve/CVE-2024-0519/","title":"[KEV] CVE-2024-0519: Google Chromium V8 Out-of-Bounds Memory Access Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2024-01-17. ENISA EUVD lists it as exploited. EPSS 3.8% (higher than 90% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 67.2 of 100.","summary":"Google Chromium V8 Out-of-Bounds Memory Access Vulnerability","date_published":"2024-01-17T00:00:00.000Z","date_modified":"2026-06-17T06:53:41.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":67.2,"kev":{"dateAdded":"2024-01-17","ransomware":false},"epss":{"score":0.03802,"percentile":0.89994},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-33063#kev","url":"https://patchfirst.co/cve/CVE-2023-33063/","title":"[KEV] CVE-2023-33063: Qualcomm Multiple Chipsets Use-After-Free Vulnerability","content_text":"Qualcomm · Multiple Chipsets. In CISA KEV since 2023-12-05. ENISA EUVD lists it as exploited. EPSS 0.7% (higher than 52.1% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1203 Exploitation for Client Execution. Priority 53.9 of 100.","summary":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","date_published":"2023-12-05T00:00:00.000Z","date_modified":"2026-06-17T06:00:38.000Z","tags":["kev","T1068","T1203"],"_patchfirst":{"reason":"kev","priority":53.9,"kev":{"dateAdded":"2023-12-05","ransomware":false},"epss":{"score":0.00672,"percentile":0.52057},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Qualcomm","product":"Multiple Chipsets","techniqueIds":["T1068","T1203"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-6345#kev","url":"https://patchfirst.co/cve/CVE-2023-6345/","title":"[KEV] CVE-2023-6345: Google Skia Integer Overflow Vulnerability","content_text":"Google · Chromium Skia. In CISA KEV since 2023-11-30. ENISA EUVD lists it as exploited. EPSS 16.5% (higher than 97% of CVEs). CVSS 9.6 CRITICAL. ATT&CK: T1203 Exploitation for Client Execution; T1068 Exploitation for Privilege Escalation. Priority 64.1 of 100.","summary":"Google Skia Integer Overflow Vulnerability","date_published":"2023-11-30T00:00:00.000Z","date_modified":"2026-06-17T06:50:34.000Z","tags":["kev","T1203","T1068"],"_patchfirst":{"reason":"kev","priority":64.1,"kev":{"dateAdded":"2023-11-30","ransomware":false},"epss":{"score":0.16468,"percentile":0.96982},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chromium Skia","techniqueIds":["T1203","T1068"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-38545","url":"https://patchfirst.co/cve/CVE-2023-38545/","title":"CVE-2023-38545: This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake","content_text":"curl · curl. Not in CISA KEV. EPSS 78.7% (higher than 99.59% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1203 Exploitation for Client Execution. Named in 1 threat report. Priority 37.0 of 100.","summary":"This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake","date_published":"2023-10-18T00:00:00.000Z","date_modified":"2026-10-14T23:35:01.000Z","tags":["public-exploit","T1203"],"_patchfirst":{"reason":"published","priority":37,"kev":null,"epss":{"score":0.78689,"percentile":0.99588},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"curl","product":"curl","techniqueIds":["T1203"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-21608#kev","url":"https://patchfirst.co/cve/CVE-2023-21608/","title":"[KEV] CVE-2023-21608: Adobe Acrobat and Reader Use-After-Free Vulnerability","content_text":"Adobe · Acrobat and Reader. In CISA KEV since 2023-10-10. ENISA EUVD lists it as exploited. EPSS 59.4% (higher than 99.12% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1203 Exploitation for Client Execution. Priority 68.3 of 100.","summary":"Adobe Acrobat and Reader Use-After-Free Vulnerability","date_published":"2023-10-10T00:00:00.000Z","date_modified":"2026-06-17T05:33:17.000Z","tags":["kev","public-exploit","T1204.002","T1203"],"_patchfirst":{"reason":"kev","priority":68.3,"kev":{"dateAdded":"2023-10-10","ransomware":false},"epss":{"score":0.59427,"percentile":0.9912},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Adobe","product":"Acrobat and Reader","techniqueIds":["T1204.002","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-26369#kev","url":"https://patchfirst.co/cve/CVE-2023-26369/","title":"[KEV] CVE-2023-26369: Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability","content_text":"Adobe · Acrobat and Reader. In CISA KEV since 2023-09-14. ENISA EUVD lists it as exploited. EPSS 6.7% (higher than 94% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.002 Malicious File; T1203 Exploitation for Client Execution. Priority 62.3 of 100.","summary":"Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability","date_published":"2023-09-14T00:00:00.000Z","date_modified":"2026-06-17T05:43:11.000Z","tags":["kev","T1204.002","T1203"],"_patchfirst":{"reason":"kev","priority":62.3,"kev":{"dateAdded":"2023-09-14","ransomware":false},"epss":{"score":0.06746,"percentile":0.93954},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Adobe","product":"Acrobat and Reader","techniqueIds":["T1204.002","T1203"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2013-3163#kev","url":"https://patchfirst.co/cve/CVE-2013-3163/","title":"[KEV] CVE-2013-3163: Microsoft Internet Explorer Memory Corruption Vulnerability","content_text":"Microsoft · Internet Explorer. In CISA KEV since 2023-03-30. ENISA EUVD lists it as exploited. EPSS 70.7% (higher than 99.39% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Named in 1 threat report. Priority 57.9 of 100.","summary":"Microsoft Internet Explorer Memory Corruption Vulnerability","date_published":"2023-03-30T00:00:00.000Z","date_modified":"2026-06-16T23:54:37.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":57.9,"kev":{"dateAdded":"2023-03-30","ransomware":false},"epss":{"score":0.70676,"percentile":0.99393},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Internet Explorer","techniqueIds":["T1189","T1203"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-23529","url":"https://patchfirst.co/cve/CVE-2023-23529/","title":"CVE-2023-23529: Apple Multiple Products WebKit Type Confusion Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2023-02-14. ENISA EUVD lists it as exploited. EPSS 9.4% (higher than 95.4% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 63.2 of 100.","summary":"Apple Multiple Products WebKit Type Confusion Vulnerability","date_published":"2023-02-27T00:00:00.000Z","date_modified":"2026-06-17T05:37:21.000Z","tags":["kev","T1189","T1203"],"_patchfirst":{"reason":"published","priority":63.2,"kev":{"dateAdded":"2023-02-14","ransomware":false},"epss":{"score":0.09426,"percentile":0.9541},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2022-26485","url":"https://patchfirst.co/cve/CVE-2022-26485/","title":"CVE-2022-26485: Mozilla Firefox Use-After-Free Vulnerability","content_text":"Mozilla · Firefox. In CISA KEV since 2022-03-07. ENISA EUVD lists it as exploited. EPSS 14.3% (higher than 96.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.5 of 100.","summary":"Mozilla Firefox Use-After-Free Vulnerability","date_published":"2022-12-22T00:00:00.000Z","date_modified":"2026-08-19T15:29:21.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"published","priority":68.5,"kev":{"dateAdded":"2022-03-07","ransomware":false},"epss":{"score":0.14261,"percentile":0.96592},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Mozilla","product":"Firefox","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-41128","url":"https://patchfirst.co/cve/CVE-2022-41128/","title":"CVE-2022-41128: Microsoft Windows Scripting Languages Remote Code Execution Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2022-11-08. ENISA EUVD lists it as exploited. EPSS 24.6% (higher than 97.9% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1566 Phishing; T1203 Exploitation for Client Execution; T1070 Indicator Removal. Priority 63.7 of 100.","summary":"Microsoft Windows Scripting Languages Remote Code Execution Vulnerability","date_published":"2022-11-09T00:00:00.000Z","date_modified":"2026-08-10T16:18:24.000Z","tags":["kev","T1566","T1203","T1070"],"_patchfirst":{"reason":"published","priority":63.7,"kev":{"dateAdded":"2022-11-08","ransomware":false},"epss":{"score":0.24623,"percentile":0.97883},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1566","T1203","T1070"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2022-2294#kev","url":"https://patchfirst.co/cve/CVE-2022-2294/","title":"[KEV] CVE-2022-2294: WebRTC Heap Buffer Overflow Vulnerability","content_text":"WebRTC · WebRTC. In CISA KEV since 2022-08-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 70.8% (higher than 99.4% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 74.0 of 100.","summary":"WebRTC Heap Buffer Overflow Vulnerability","date_published":"2022-08-25T00:00:00.000Z","date_modified":"2026-08-04T05:16:28.000Z","tags":["kev","ransomware","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":74,"kev":{"dateAdded":"2022-08-25","ransomware":true},"epss":{"score":0.70833,"percentile":0.99398},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"WebRTC","product":"WebRTC","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-38406#kev","url":"https://patchfirst.co/cve/CVE-2021-38406/","title":"[KEV] CVE-2021-38406: Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability","content_text":"Delta Electronics · DOPSoft 2. In CISA KEV since 2022-08-25. ENISA EUVD lists it as exploited. EPSS 76.4% (higher than 99.54% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.002 Malicious File; T1203 Exploitation for Client Execution. Priority 63.4 of 100.","summary":"Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability","date_published":"2022-08-25T00:00:00.000Z","date_modified":"2026-06-17T04:02:02.000Z","tags":["kev","T1204.002","T1203"],"_patchfirst":{"reason":"kev","priority":63.4,"kev":{"dateAdded":"2022-08-25","ransomware":false},"epss":{"score":0.76428,"percentile":0.9954},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Delta Electronics","product":"DOPSoft 2","techniqueIds":["T1204.002","T1203"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2022-32893","url":"https://patchfirst.co/cve/CVE-2022-32893/","title":"CVE-2022-32893: Apple iOS and macOS Out-of-Bounds Write Vulnerability","content_text":"Apple · iOS and macOS. In CISA KEV since 2022-08-18. ENISA EUVD lists it as exploited. EPSS 9.9% (higher than 95.6% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 63.3 of 100.","summary":"Apple iOS and macOS Out-of-Bounds Write Vulnerability","date_published":"2022-08-24T00:00:00.000Z","date_modified":"2026-06-17T04:48:09.000Z","tags":["kev","T1189","T1203"],"_patchfirst":{"reason":"published","priority":63.3,"kev":{"dateAdded":"2022-08-18","ransomware":false},"epss":{"score":0.09931,"percentile":0.95584},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"iOS and macOS","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2022-1364","url":"https://patchfirst.co/cve/CVE-2022-1364/","title":"CVE-2022-1364: Google Chromium V8 Type Confusion Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2022-04-15. ENISA EUVD lists it as exploited. EPSS 13.9% (higher than 96.5% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.5 of 100.","summary":"Google Chromium V8 Type Confusion Vulnerability","date_published":"2022-07-26T00:00:00.000Z","date_modified":"2026-06-17T04:22:17.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"published","priority":68.5,"kev":{"dateAdded":"2022-04-15","ransomware":false},"epss":{"score":0.13921,"percentile":0.96536},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-1096","url":"https://patchfirst.co/cve/CVE-2022-1096/","title":"CVE-2022-1096: Google Chromium V8 Type Confusion Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2022-03-28. ENISA EUVD lists it as exploited. EPSS 24.7% (higher than 97.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.7 of 100.","summary":"Google Chromium V8 Type Confusion Vulnerability","date_published":"2022-07-23T00:00:00.000Z","date_modified":"2026-06-17T04:21:49.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"published","priority":68.7,"kev":{"dateAdded":"2022-03-28","ransomware":false},"epss":{"score":0.24726,"percentile":0.97894},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2017-5030#kev","url":"https://patchfirst.co/cve/CVE-2017-5030/","title":"[KEV] CVE-2017-5030: Google Chromium V8 Memory Corruption Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 40.6% (higher than 98.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.9 of 100.","summary":"Google Chromium V8 Memory Corruption Vulnerability","date_published":"2022-06-08T00:00:00.000Z","date_modified":"2026-06-17T01:19:46.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":68.9,"kev":{"dateAdded":"2022-06-08","ransomware":false},"epss":{"score":0.40635,"percentile":0.98649},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2016-5198#kev","url":"https://patchfirst.co/cve/CVE-2016-5198/","title":"[KEV] CVE-2016-5198: Google Chromium V8 Out-of-Bounds Memory Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 34.2% (higher than 98.4% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.8 of 100.","summary":"Google Chromium V8 Out-of-Bounds Memory Vulnerability","date_published":"2022-06-08T00:00:00.000Z","date_modified":"2026-06-17T00:48:57.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":68.8,"kev":{"dateAdded":"2022-06-08","ransomware":false},"epss":{"score":0.34164,"percentile":0.984},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2017-5070#kev","url":"https://patchfirst.co/cve/CVE-2017-5070/","title":"[KEV] CVE-2017-5070: Google Chromium V8 Type Confusion Vulnerability","content_text":"Google · Chromium V8. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 32.1% (higher than 98.3% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.8 of 100.","summary":"Google Chromium V8 Type Confusion Vulnerability","date_published":"2022-06-08T00:00:00.000Z","date_modified":"2026-06-17T01:19:51.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":68.8,"kev":{"dateAdded":"2022-06-08","ransomware":false},"epss":{"score":0.32071,"percentile":0.9831},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium V8","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2011-0609#kev","url":"https://patchfirst.co/cve/CVE-2011-0609/","title":"[KEV] CVE-2011-0609: Adobe Flash Player Unspecified Vulnerability","content_text":"Adobe · Flash Player. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 63.5% (higher than 99.21% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution; T1499.004 Application or System Exploitation. Priority 68.3 of 100.","summary":"Adobe Flash Player Unspecified Vulnerability","date_published":"2022-06-08T00:00:00.000Z","date_modified":"2026-06-16T23:27:44.000Z","tags":["kev","public-exploit","T1189","T1203","T1499.004"],"_patchfirst":{"reason":"kev","priority":68.3,"kev":{"dateAdded":"2022-06-08","ransomware":false},"epss":{"score":0.63507,"percentile":0.9921},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Adobe","product":"Flash Player","techniqueIds":["T1189","T1203","T1499.004"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}}]}