https://patchfirst.co/technique/T1203/New and newly exploited CVEs that lead to ATT&CK T1203 Exploitation for Client Execution, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-85046/CVE-2026-85046#kevFri, 04 Sep 2026 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2026-09-04. ENISA EUVD lists it as exploited. EPSS 1.8% (higher than 78.5% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 74.9 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2026-11645/CVE-2026-11645#kevTue, 09 Jun 2026 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2026-06-09. ENISA EUVD lists it as exploited. EPSS 2.4% (higher than 84.3% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 71.0 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2009-3459/CVE-2009-3459#kevWed, 20 May 2026 00:00:00 GMTAdobe · Acrobat and Reader. In CISA KEV since 2026-05-20. ENISA EUVD lists it as exploited. EPSS 86.6% (higher than 99.74% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1203 Exploitation for Client Execution; T1204.002 Malicious File. Priority 69.1 of 100.kevpublic-exploitT1203T1204.002https://patchfirst.co/cve/CVE-2010-0249/CVE-2010-0249#kevWed, 20 May 2026 00:00:00 GMTMicrosoft · Internet Explorer. In CISA KEV since 2026-05-20. ENISA EUVD lists it as exploited. EPSS 91.9% (higher than 99.82% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 54.1 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2020-9715/CVE-2020-9715#kevMon, 13 Apr 2026 00:00:00 GMTAdobe · Acrobat. In CISA KEV since 2026-04-13. ENISA EUVD lists it as exploited. EPSS 33.5% (higher than 98.4% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1203 Exploitation for Client Execution. Priority 73.1 of 100.kevpublic-exploitT1204.002T1203https://patchfirst.co/cve/CVE-2026-34621/CVE-2026-34621#kevMon, 13 Apr 2026 00:00:00 GMTAdobe · Acrobat and Reader. In CISA KEV since 2026-04-13. ENISA EUVD lists it as exploited. EPSS 7.2% (higher than 94.3% of CVEs). CVSS 8.6 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1203 Exploitation for Client Execution. Priority 72.9 of 100.kevpublic-exploitT1204.002T1203https://patchfirst.co/cve/CVE-2026-5281/CVE-2026-5281#kevWed, 01 Apr 2026 00:00:00 GMTGoogle · Dawn. In CISA KEV since 2026-04-01. ENISA EUVD lists it as exploited. EPSS 13.7% (higher than 96.5% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 73.5 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2025-31277/CVE-2025-31277#kevFri, 20 Mar 2026 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2026-03-20. ENISA EUVD lists it as exploited. EPSS 1.7% (higher than 76.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 69.5 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2026-3909/CVE-2026-3909#kevFri, 13 Mar 2026 00:00:00 GMTGoogle · Skia. In CISA KEV since 2026-03-13. ENISA EUVD lists it as exploited. EPSS 2.3% (higher than 83.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 70.9 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2023-43000/CVE-2023-43000#kevThu, 05 Mar 2026 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2026-03-05. ENISA EUVD lists it as exploited. EPSS 4.0% (higher than 90.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 72.3 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2008-0015/CVE-2008-0015#kevTue, 17 Feb 2026 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2026-02-17. ENISA EUVD lists it as exploited. EPSS 76.6% (higher than 99.54% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 69.1 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2025-14174/CVE-2025-14174#kevFri, 12 Dec 2025 00:00:00 GMTGoogle · Chromium. In CISA KEV since 2025-12-12. ENISA EUVD lists it as exploited. EPSS 55.3% (higher than 99.03% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 74.0 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2011-3402/CVE-2011-3402#kevMon, 06 Oct 2025 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2025-10-06. ENISA EUVD lists it as exploited. EPSS 78.1% (higher than 99.58% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1203 Exploitation for Client Execution. Priority 79.1 of 100.kevpublic-exploitT1204.002T1203https://patchfirst.co/cve/CVE-2013-3918/CVE-2013-3918#kevMon, 06 Oct 2025 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2025-10-06. ENISA EUVD lists it as exploited. EPSS 73.7% (higher than 99.47% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution; T1499 Endpoint Denial of Service. Named in 1 threat report. Priority 72.9 of 100.kevpublic-exploitT1189T1203T1499https://patchfirst.co/cve/CVE-2007-0671/CVE-2007-0671#kevTue, 12 Aug 2025 00:00:00 GMTMicrosoft · Office. In CISA KEV since 2025-08-12. ENISA EUVD lists it as exploited. EPSS 43.2% (higher than 98.7% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1204.002 Malicious File; T1203 Exploitation for Client Execution. Priority 63.9 of 100.kevT1204.002T1203https://patchfirst.co/cve/CVE-2025-6558/CVE-2025-6558#kevTue, 22 Jul 2025 00:00:00 GMTGoogle · Chromium. In CISA KEV since 2025-07-22. ENISA EUVD lists it as exploited. EPSS 10.9% (higher than 95.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution; T1497 Virtualization/Sandbox Evasion. Priority 68.3 of 100.kevpublic-exploitT1189T1203T1497https://patchfirst.co/cve/CVE-2025-6554/CVE-2025-6554#kevWed, 02 Jul 2025 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2025-07-02. ENISA EUVD lists it as exploited. EPSS 14.1% (higher than 96.6% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution; T1059 Command and Scripting Interpreter. Priority 68.0 of 100.kevpublic-exploitT1189T1203T1059https://patchfirst.co/cve/CVE-2025-43200/CVE-2025-43200#kevMon, 16 Jun 2025 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2025-06-16. ENISA EUVD lists it as exploited. EPSS 1.2% (higher than 67.9% of CVEs). CVSS 4.2 MEDIUM. ATT&CK: T1203 Exploitation for Client Execution; T1105 Ingress Tool Transfer; T1005 Data from Local System. Priority 54.5 of 100.kevT1203T1105T1005https://patchfirst.co/cve/CVE-2025-5419/CVE-2025-5419#kevThu, 05 Jun 2025 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2025-06-05. ENISA EUVD lists it as exploited. EPSS 7.5% (higher than 94.5% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.1 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2025-27038/CVE-2025-27038#kevTue, 03 Jun 2025 00:00:00 GMTQualcomm · Multiple Chipsets. In CISA KEV since 2025-06-03. ENISA EUVD lists it as exploited. EPSS 1.0% (higher than 64.1% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1203 Exploitation for Client Execution; T1059 Command and Scripting Interpreter. Priority 56.1 of 100.kevT1203T1059https://patchfirst.co/cve/CVE-2025-30397/CVE-2025-30397#kevTue, 13 May 2025 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2025-05-13. ENISA EUVD lists it as exploited. EPSS 27.3% (higher than 98.1% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1203 Exploitation for Client Execution; T1059 Command and Scripting Interpreter. Priority 67.9 of 100.kevpublic-exploitT1203T1059https://patchfirst.co/cve/CVE-2025-2783/CVE-2025-2783#kevThu, 27 Mar 2025 00:00:00 GMTGoogle · Chromium Mojo. In CISA KEV since 2025-03-27. ENISA EUVD lists it as exploited. EPSS 9.2% (higher than 95.3% of CVEs). CVSS 8.3 HIGH. Public exploit code exists. ATT&CK: T1203 Exploitation for Client Execution; T1548 Abuse Elevation Control Mechanism; T1497 Virtualization/Sandbox Evasion. Priority 67.9 of 100.kevpublic-exploitT1203T1548T1497https://patchfirst.co/cve/CVE-2025-24993/CVE-2025-24993#kevTue, 11 Mar 2025 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2025-03-11. ENISA EUVD lists it as exploited. EPSS 2.2% (higher than 82.6% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1203 Exploitation for Client Execution; T1204 User Execution; T1055 Process Injection; T1565 Data Manipulation. Priority 60.0 of 100.kevT1068T1203T1204T1055T1565https://patchfirst.co/cve/CVE-2022-23748/CVE-2022-23748#kevThu, 06 Feb 2025 00:00:00 GMTAudinate · Dante Discovery. In CISA KEV since 2025-02-06. ENISA EUVD lists it as exploited. EPSS 8.3% (higher than 94.9% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1059 Command and Scripting Interpreter; T1203 Exploitation for Client Execution. Priority 62.4 of 100.kevT1059T1203https://patchfirst.co/cve/CVE-2024-44308/CVE-2024-44308#kevThu, 21 Nov 2024 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2024-11-21. ENISA EUVD lists it as exploited. EPSS 9.9% (higher than 95.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.3 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2014-0502/CVE-2014-0502#kevTue, 17 Sep 2024 00:00:00 GMTAdobe · Flash Player. In CISA KEV since 2024-09-17. ENISA EUVD lists it as exploited. EPSS 24.8% (higher than 97.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.7 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2024-7965/CVE-2024-7965#kevWed, 28 Aug 2024 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2024-08-28. ENISA EUVD lists it as exploited. EPSS 18.5% (higher than 97.2% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.6 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2024-7971/CVE-2024-7971#kevMon, 26 Aug 2024 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2024-08-26. ENISA EUVD lists it as exploited. EPSS 21.0% (higher than 97.6% of CVEs). CVSS 9.6 CRITICAL. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 69.2 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2018-0824/CVE-2018-0824#kevMon, 05 Aug 2024 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2024-08-05. ENISA EUVD lists it as exploited. EPSS 73.0% (higher than 99.45% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1203 Exploitation for Client Execution; T1059 Command and Scripting Interpreter. Priority 69.1 of 100.kevpublic-exploitT1203T1059https://patchfirst.co/cve/CVE-2024-26169/CVE-2024-26169#kevThu, 13 Jun 2024 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2024-06-13, known ransomware use. ENISA EUVD lists it as exploited. EPSS 4.0% (higher than 90.5% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1112 Modify Registry; T1203 Exploitation for Client Execution; T1059 Command and Scripting Interpreter. Priority 71.6 of 100.kevransomwareT1112T1203T1059https://patchfirst.co/cve/CVE-2024-5274/CVE-2024-5274#kevTue, 28 May 2024 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2024-05-28. ENISA EUVD lists it as exploited. EPSS 7.7% (higher than 94.6% of CVEs). CVSS 9.6 CRITICAL. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.6 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2024-0519/CVE-2024-0519#kevWed, 17 Jan 2024 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2024-01-17. ENISA EUVD lists it as exploited. EPSS 3.8% (higher than 90% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 67.2 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2023-33063/CVE-2023-33063#kevTue, 05 Dec 2023 00:00:00 GMTQualcomm · Multiple Chipsets. In CISA KEV since 2023-12-05. ENISA EUVD lists it as exploited. EPSS 0.7% (higher than 52.1% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1203 Exploitation for Client Execution. Priority 53.9 of 100.kevT1068T1203https://patchfirst.co/cve/CVE-2023-6345/CVE-2023-6345#kevThu, 30 Nov 2023 00:00:00 GMTGoogle · Chromium Skia. In CISA KEV since 2023-11-30. ENISA EUVD lists it as exploited. EPSS 16.5% (higher than 97% of CVEs). CVSS 9.6 CRITICAL. ATT&CK: T1203 Exploitation for Client Execution; T1068 Exploitation for Privilege Escalation. Priority 64.1 of 100.kevT1203T1068https://patchfirst.co/cve/CVE-2023-38545/CVE-2023-38545Wed, 18 Oct 2023 00:00:00 GMTcurl · curl. Not in CISA KEV. EPSS 78.7% (higher than 99.59% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1203 Exploitation for Client Execution. Named in 1 threat report. Priority 37.0 of 100.public-exploitT1203https://patchfirst.co/cve/CVE-2023-21608/CVE-2023-21608#kevTue, 10 Oct 2023 00:00:00 GMTAdobe · Acrobat and Reader. In CISA KEV since 2023-10-10. ENISA EUVD lists it as exploited. EPSS 59.4% (higher than 99.12% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1203 Exploitation for Client Execution. Priority 68.3 of 100.kevpublic-exploitT1204.002T1203https://patchfirst.co/cve/CVE-2023-26369/CVE-2023-26369#kevThu, 14 Sep 2023 00:00:00 GMTAdobe · Acrobat and Reader. In CISA KEV since 2023-09-14. ENISA EUVD lists it as exploited. EPSS 6.7% (higher than 94% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.002 Malicious File; T1203 Exploitation for Client Execution. Priority 62.3 of 100.kevT1204.002T1203https://patchfirst.co/cve/CVE-2013-3163/CVE-2013-3163#kevThu, 30 Mar 2023 00:00:00 GMTMicrosoft · Internet Explorer. In CISA KEV since 2023-03-30. ENISA EUVD lists it as exploited. EPSS 70.7% (higher than 99.39% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Named in 1 threat report. Priority 57.9 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2023-23529/CVE-2023-23529Mon, 27 Feb 2023 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2023-02-14. ENISA EUVD lists it as exploited. EPSS 9.4% (higher than 95.4% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 63.2 of 100.kevT1189T1203https://patchfirst.co/cve/CVE-2022-26485/CVE-2022-26485Thu, 22 Dec 2022 00:00:00 GMTMozilla · Firefox. In CISA KEV since 2022-03-07. ENISA EUVD lists it as exploited. EPSS 14.3% (higher than 96.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.5 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2022-41128/CVE-2022-41128Wed, 09 Nov 2022 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2022-11-08. ENISA EUVD lists it as exploited. EPSS 24.6% (higher than 97.9% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1566 Phishing; T1203 Exploitation for Client Execution; T1070 Indicator Removal. Priority 63.7 of 100.kevT1566T1203T1070https://patchfirst.co/cve/CVE-2022-2294/CVE-2022-2294#kevThu, 25 Aug 2022 00:00:00 GMTWebRTC · WebRTC. In CISA KEV since 2022-08-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 70.8% (higher than 99.4% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 74.0 of 100.kevransomwareT1189T1203https://patchfirst.co/cve/CVE-2021-38406/CVE-2021-38406#kevThu, 25 Aug 2022 00:00:00 GMTDelta Electronics · DOPSoft 2. In CISA KEV since 2022-08-25. ENISA EUVD lists it as exploited. EPSS 76.4% (higher than 99.54% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.002 Malicious File; T1203 Exploitation for Client Execution. Priority 63.4 of 100.kevT1204.002T1203https://patchfirst.co/cve/CVE-2022-32893/CVE-2022-32893Wed, 24 Aug 2022 00:00:00 GMTApple · iOS and macOS. In CISA KEV since 2022-08-18. ENISA EUVD lists it as exploited. EPSS 9.9% (higher than 95.6% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 63.3 of 100.kevT1189T1203https://patchfirst.co/cve/CVE-2022-1364/CVE-2022-1364Tue, 26 Jul 2022 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2022-04-15. ENISA EUVD lists it as exploited. EPSS 13.9% (higher than 96.5% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.5 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2022-1096/CVE-2022-1096Sat, 23 Jul 2022 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2022-03-28. ENISA EUVD lists it as exploited. EPSS 24.7% (higher than 97.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.7 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2017-5030/CVE-2017-5030#kevWed, 08 Jun 2022 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 40.6% (higher than 98.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.9 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2016-5198/CVE-2016-5198#kevWed, 08 Jun 2022 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 34.2% (higher than 98.4% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.8 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2017-5070/CVE-2017-5070#kevWed, 08 Jun 2022 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 32.1% (higher than 98.3% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.8 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2011-0609/CVE-2011-0609#kevWed, 08 Jun 2022 00:00:00 GMTAdobe · Flash Player. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 63.5% (higher than 99.21% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution; T1499.004 Application or System Exploitation. Priority 68.3 of 100.kevpublic-exploitT1189T1203T1499.004