<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Patchfirst: CVEs linked to T1204.001 Malicious Link</title><link>https://patchfirst.co/technique/T1204.001/</link><atom:link href="https://patchfirst.co/feed/technique/T1204.001.xml" rel="self" type="application/rss+xml"/><description>New and newly exploited CVEs that lead to ATT&amp;CK T1204.001 Malicious Link, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.</description><language>en-gb</language><ttl>360</ttl><lastBuildDate>Sat, 31 Oct 2026 05:11:25 GMT</lastBuildDate><item><title>[KEV] CVE-2026-96951: Microsoft Windows Command Injection Vulnerability</title><link>https://patchfirst.co/cve/CVE-2026-96951/</link><guid isPermaLink="false">CVE-2026-96951#kev</guid><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate><description>Microsoft · Windows. In CISA KEV since 2026-10-13. ENISA EUVD lists it as exploited. EPSS 9.8% (higher than 95.5% of CVEs). CVSS 8.8 HIGH. ATT&amp;CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter. Priority 73.3 of 100.</description><category>kev</category><category>T1204.001</category><category>T1059</category></item><item><title>[KEV] CVE-2008-4128: Cisco IOS Cross-Site Request Forgery Vulnerability</title><link>https://patchfirst.co/cve/CVE-2008-4128/</link><guid isPermaLink="false">CVE-2008-4128#kev</guid><pubDate>Mon, 13 Jul 2026 00:00:00 GMT</pubDate><description>Cisco · IOS. In CISA KEV since 2026-07-13. ENISA EUVD lists it as exploited. EPSS 33.9% (higher than 98.4% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&amp;CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter. Priority 73.3 of 100.</description><category>kev</category><category>public-exploit</category><category>T1204.001</category><category>T1059</category></item><item><title>[KEV] CVE-2025-68461: RoundCube Webmail Cross-site Scripting Vulnerability</title><link>https://patchfirst.co/cve/CVE-2025-68461/</link><guid isPermaLink="false">CVE-2025-68461#kev</guid><pubDate>Fri, 20 Feb 2026 00:00:00 GMT</pubDate><description>Roundcube · Webmail. In CISA KEV since 2026-02-20. ENISA EUVD lists it as exploited. EPSS 27.4% (higher than 98.1% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&amp;CK: T1204.001 Malicious Link; T1059.007 JavaScript. Priority 71.9 of 100.</description><category>kev</category><category>public-exploit</category><category>T1204.001</category><category>T1059.007</category></item><item><title>[KEV] CVE-2025-6218: RARLAB WinRAR Path Traversal Vulnerability</title><link>https://patchfirst.co/cve/CVE-2025-6218/</link><guid isPermaLink="false">CVE-2025-6218#kev</guid><pubDate>Tue, 09 Dec 2025 00:00:00 GMT</pubDate><description>RARLAB · WinRAR. In CISA KEV since 2025-12-09. ENISA EUVD lists it as exploited. EPSS 90.5% (higher than 99.8% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&amp;CK: T1204.001 Malicious Link. Priority 68.4 of 100.</description><category>kev</category><category>public-exploit</category><category>T1204.001</category></item><item><title>[KEV] CVE-2020-11023: JQuery Cross-Site Scripting (XSS) Vulnerability</title><link>https://patchfirst.co/cve/CVE-2020-11023/</link><guid isPermaLink="false">CVE-2020-11023#kev</guid><pubDate>Thu, 23 Jan 2025 00:00:00 GMT</pubDate><description>JQuery · JQuery. In CISA KEV since 2025-01-23. ENISA EUVD lists it as exploited. EPSS 84.9% (higher than 99.71% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&amp;CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 67.2 of 100.</description><category>kev</category><category>public-exploit</category><category>T1204.001</category><category>T1059.007</category><category>T1557</category></item><item><title>[KEV] CVE-2014-2120: Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability</title><link>https://patchfirst.co/cve/CVE-2014-2120/</link><guid isPermaLink="false">CVE-2014-2120#kev</guid><pubDate>Tue, 12 Nov 2024 00:00:00 GMT</pubDate><description>Cisco · Adaptive Security Appliance (ASA). In CISA KEV since 2024-11-12. ENISA EUVD lists it as exploited. EPSS 22.6% (higher than 97.7% of CVEs). CVSS 6.1 MEDIUM. ATT&amp;CK: T1204.001 Malicious Link; T1059.007 JavaScript. Priority 61.8 of 100.</description><category>kev</category><category>T1204.001</category><category>T1059.007</category></item><item><title>[KEV] CVE-2024-37383: RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability</title><link>https://patchfirst.co/cve/CVE-2024-37383/</link><guid isPermaLink="false">CVE-2024-37383#kev</guid><pubDate>Thu, 24 Oct 2024 00:00:00 GMT</pubDate><description>Roundcube · Webmail. In CISA KEV since 2024-10-24. ENISA EUVD lists it as exploited. EPSS 74.0% (higher than 99.48% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&amp;CK: T1204.001 Malicious Link; T1059.007 JavaScript. Priority 67.2 of 100.</description><category>kev</category><category>public-exploit</category><category>T1204.001</category><category>T1059.007</category></item><item><title>[KEV] CVE-2024-43461: Microsoft Windows MSHTML Platform Spoofing Vulnerability</title><link>https://patchfirst.co/cve/CVE-2024-43461/</link><guid isPermaLink="false">CVE-2024-43461#kev</guid><pubDate>Mon, 16 Sep 2024 00:00:00 GMT</pubDate><description>Microsoft · Windows. In CISA KEV since 2024-09-16. ENISA EUVD lists it as exploited. EPSS 54.5% (higher than 99.01% of CVEs). CVSS 8.8 HIGH. ATT&amp;CK: T1204.001 Malicious Link. Priority 64.0 of 100.</description><category>kev</category><category>T1204.001</category></item><item><title>[KEV] CVE-2024-38112: Microsoft Windows MSHTML Platform Spoofing Vulnerability</title><link>https://patchfirst.co/cve/CVE-2024-38112/</link><guid isPermaLink="false">CVE-2024-38112#kev</guid><pubDate>Tue, 09 Jul 2024 00:00:00 GMT</pubDate><description>Microsoft · Windows. In CISA KEV since 2024-07-09. ENISA EUVD lists it as exploited. EPSS 84.2% (higher than 99.7% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&amp;CK: T1189 Drive-by Compromise; T1204.001 Malicious Link. Priority 68.2 of 100.</description><category>kev</category><category>public-exploit</category><category>T1189</category><category>T1204.001</category></item><item><title>[KEV] CVE-2014-100005: D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability</title><link>https://patchfirst.co/cve/CVE-2014-100005/</link><guid isPermaLink="false">CVE-2014-100005#kev</guid><pubDate>Thu, 16 May 2024 00:00:00 GMT</pubDate><description>D-Link · DIR-600 Router. In CISA KEV since 2024-05-16. ENISA EUVD lists it as exploited. EPSS 43.5% (higher than 98.7% of CVEs). CVSS 8.0 HIGH. Public exploit code exists. ATT&amp;CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter; T1098 Account Manipulation. Priority 68.3 of 100.</description><category>kev</category><category>public-exploit</category><category>T1204.001</category><category>T1059</category><category>T1098</category></item><item><title>[KEV] CVE-2024-30040: Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability</title><link>https://patchfirst.co/cve/CVE-2024-30040/</link><guid isPermaLink="false">CVE-2024-30040#kev</guid><pubDate>Tue, 14 May 2024 00:00:00 GMT</pubDate><description>Microsoft · Windows. In CISA KEV since 2024-05-14. ENISA EUVD lists it as exploited. EPSS 3.9% (higher than 90.4% of CVEs). CVSS 8.8 HIGH. ATT&amp;CK: T1204.001 Malicious Link; T1211 Exploitation for Stealth. Priority 62.2 of 100.</description><category>kev</category><category>T1204.001</category><category>T1211</category></item><item><title>[KEV] CVE-2024-21412: Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability</title><link>https://patchfirst.co/cve/CVE-2024-21412/</link><guid isPermaLink="false">CVE-2024-21412#kev</guid><pubDate>Tue, 13 Feb 2024 00:00:00 GMT</pubDate><description>Microsoft · Windows. In CISA KEV since 2024-02-13, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.4% (higher than 99.94% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&amp;CK: T1204.001 Malicious Link; T1553.005 Mark-of-the-Web Bypass. Named in 1 threat report. Priority 82.5 of 100.</description><category>kev</category><category>ransomware</category><category>public-exploit</category><category>T1204.001</category><category>T1553.005</category></item><item><title>[KEV] CVE-2023-36584: Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability</title><link>https://patchfirst.co/cve/CVE-2023-36584/</link><guid isPermaLink="false">CVE-2023-36584#kev</guid><pubDate>Thu, 16 Nov 2023 00:00:00 GMT</pubDate><description>Microsoft · Windows. In CISA KEV since 2023-11-16. ENISA EUVD lists it as exploited. EPSS 3.3% (higher than 88.3% of CVEs). CVSS 5.4 MEDIUM. ATT&amp;CK: T1204.001 Malicious Link; T1553.005 Mark-of-the-Web Bypass. Priority 59.4 of 100.</description><category>kev</category><category>T1204.001</category><category>T1553.005</category></item><item><title>[KEV] CVE-2023-36025: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability</title><link>https://patchfirst.co/cve/CVE-2023-36025/</link><guid isPermaLink="false">CVE-2023-36025#kev</guid><pubDate>Tue, 14 Nov 2023 00:00:00 GMT</pubDate><description>Microsoft · Windows. In CISA KEV since 2023-11-14. ENISA EUVD lists it as exploited. EPSS 88.1% (higher than 99.77% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&amp;CK: T1204.001 Malicious Link; T1211 Exploitation for Stealth. Priority 79.1 of 100.</description><category>kev</category><category>public-exploit</category><category>T1204.001</category><category>T1211</category></item><item><title>[KEV] CVE-2023-5631: Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability</title><link>https://patchfirst.co/cve/CVE-2023-5631/</link><guid isPermaLink="false">CVE-2023-5631#kev</guid><pubDate>Thu, 26 Oct 2023 00:00:00 GMT</pubDate><description>Roundcube · Webmail. In CISA KEV since 2023-10-26. ENISA EUVD lists it as exploited. EPSS 76.3% (higher than 99.54% of CVEs). CVSS 5.4 MEDIUM. Public exploit code exists. ATT&amp;CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1041 Exfiltration Over C2 Channel. Priority 66.7 of 100.</description><category>kev</category><category>public-exploit</category><category>T1204.001</category><category>T1059.007</category><category>T1041</category></item><item><title>[KEV] CVE-2023-5217: Google Chromium libvpx Heap Buffer Overflow Vulnerability</title><link>https://patchfirst.co/cve/CVE-2023-5217/</link><guid isPermaLink="false">CVE-2023-5217#kev</guid><pubDate>Mon, 02 Oct 2023 00:00:00 GMT</pubDate><description>Google · Chromium libvpx. In CISA KEV since 2023-10-02. ENISA EUVD lists it as exploited. EPSS 49.0% (higher than 98.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&amp;CK: T1204.001 Malicious Link; T1574 Hijack Execution Flow. Priority 68.9 of 100.</description><category>kev</category><category>public-exploit</category><category>T1204.001</category><category>T1574</category></item><item><title>[KEV] CVE-2023-41061: Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability</title><link>https://patchfirst.co/cve/CVE-2023-41061/</link><guid isPermaLink="false">CVE-2023-41061#kev</guid><pubDate>Mon, 11 Sep 2023 00:00:00 GMT</pubDate><description>Apple · iOS, iPadOS, and watchOS. In CISA KEV since 2023-09-11. ENISA EUVD lists it as exploited. EPSS 4.4% (higher than 91.3% of CVEs). CVSS 7.8 HIGH. ATT&amp;CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter. Priority 61.7 of 100.</description><category>kev</category><category>T1204.001</category><category>T1059</category></item><item><title>CVE-2023-37580: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability</title><link>https://patchfirst.co/cve/CVE-2023-37580/</link><guid isPermaLink="false">CVE-2023-37580</guid><pubDate>Mon, 31 Jul 2023 00:00:00 GMT</pubDate><description>Synacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2023-07-27. ENISA EUVD lists it as exploited. EPSS 49.1% (higher than 98.9% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&amp;CK: T1204.001 Malicious Link; T1059.007 JavaScript. Priority 67.0 of 100.</description><category>kev</category><category>public-exploit</category><category>T1204.001</category><category>T1059.007</category></item><item><title>[KEV] CVE-2023-35311: Microsoft Outlook Security Feature Bypass Vulnerability</title><link>https://patchfirst.co/cve/CVE-2023-35311/</link><guid isPermaLink="false">CVE-2023-35311#kev</guid><pubDate>Tue, 11 Jul 2023 00:00:00 GMT</pubDate><description>Microsoft · Outlook. In CISA KEV since 2023-07-11. ENISA EUVD lists it as exploited. EPSS 15.5% (higher than 96.8% of CVEs). CVSS 8.8 HIGH. ATT&amp;CK: T1204.001 Malicious Link; T1211 Exploitation for Stealth. Priority 63.5 of 100.</description><category>kev</category><category>T1204.001</category><category>T1211</category></item><item><title>[KEV] CVE-2023-32046: Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability</title><link>https://patchfirst.co/cve/CVE-2023-32046/</link><guid isPermaLink="false">CVE-2023-32046#kev</guid><pubDate>Tue, 11 Jul 2023 00:00:00 GMT</pubDate><description>Microsoft · Windows. In CISA KEV since 2023-07-11. ENISA EUVD lists it as exploited. EPSS 10.0% (higher than 95.6% of CVEs). CVSS 7.8 HIGH. ATT&amp;CK: T1204.001 Malicious Link; T1068 Exploitation for Privilege Escalation. Priority 62.6 of 100.</description><category>kev</category><category>T1204.001</category><category>T1068</category></item><item><title>[KEV] CVE-2023-2136: Google Chrome Skia Integer Overflow Vulnerability</title><link>https://patchfirst.co/cve/CVE-2023-2136/</link><guid isPermaLink="false">CVE-2023-2136#kev</guid><pubDate>Fri, 21 Apr 2023 00:00:00 GMT</pubDate><description>Google · Chromium Skia. In CISA KEV since 2023-04-21. ENISA EUVD lists it as exploited. EPSS 5.8% (higher than 93.1% of CVEs). CVSS 9.6 CRITICAL. ATT&amp;CK: T1204.001 Malicious Link. Priority 63.3 of 100.</description><category>kev</category><category>T1204.001</category></item><item><title>[KEV] CVE-2022-3038: Google Chromium Network Service Use-After-Free Vulnerability</title><link>https://patchfirst.co/cve/CVE-2022-3038/</link><guid isPermaLink="false">CVE-2022-3038#kev</guid><pubDate>Thu, 30 Mar 2023 00:00:00 GMT</pubDate><description>Google · Chromium Network Service. In CISA KEV since 2023-03-30. ENISA EUVD lists it as exploited. EPSS 24.9% (higher than 97.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&amp;CK: T1204.001 Malicious Link; T1574 Hijack Execution Flow. Priority 68.7 of 100.</description><category>kev</category><category>public-exploit</category><category>T1204.001</category><category>T1574</category></item><item><title>[KEV] CVE-2023-24880: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability</title><link>https://patchfirst.co/cve/CVE-2023-24880/</link><guid isPermaLink="false">CVE-2023-24880#kev</guid><pubDate>Tue, 14 Mar 2023 00:00:00 GMT</pubDate><description>Microsoft · Windows. In CISA KEV since 2023-03-14, known ransomware use. ENISA EUVD lists it as exploited. EPSS 78.0% (higher than 99.57% of CVEs). CVSS 4.4 MEDIUM. ATT&amp;CK: T1204.001 Malicious Link; T1553.005 Mark-of-the-Web Bypass. Priority 71.0 of 100.</description><category>kev</category><category>ransomware</category><category>T1204.001</category><category>T1553.005</category></item><item><title>[KEV] CVE-2022-41049: Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability</title><link>https://patchfirst.co/cve/CVE-2022-41049/</link><guid isPermaLink="false">CVE-2022-41049#kev</guid><pubDate>Mon, 14 Nov 2022 00:00:00 GMT</pubDate><description>Microsoft · Windows. In CISA KEV since 2022-11-14. ENISA EUVD lists it as exploited. EPSS 2.6% (higher than 85.5% of CVEs). CVSS 5.4 MEDIUM. ATT&amp;CK: T1204.001 Malicious Link; T1553.005 Mark-of-the-Web Bypass. Priority 58.9 of 100.</description><category>kev</category><category>T1204.001</category><category>T1553.005</category></item><item><title>CVE-2022-3075: Google Chromium Mojo Insufficient Data Validation Vulnerability</title><link>https://patchfirst.co/cve/CVE-2022-3075/</link><guid isPermaLink="false">CVE-2022-3075</guid><pubDate>Mon, 26 Sep 2022 00:00:00 GMT</pubDate><description>Google · Chromium Mojo. In CISA KEV since 2022-09-08. ENISA EUVD lists it as exploited. EPSS 5.8% (higher than 93.2% of CVEs). CVSS 9.6 CRITICAL. ATT&amp;CK: T1204.001 Malicious Link. Priority 63.4 of 100.</description><category>kev</category><category>T1204.001</category></item><item><title>[KEV] CVE-2010-2568: Microsoft Windows Remote Code Execution Vulnerability</title><link>https://patchfirst.co/cve/CVE-2010-2568/</link><guid isPermaLink="false">CVE-2010-2568#kev</guid><pubDate>Thu, 15 Sep 2022 00:00:00 GMT</pubDate><description>Microsoft · Windows. In CISA KEV since 2022-09-15. ENISA EUVD lists it as exploited. EPSS 89.6% (higher than 99.79% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&amp;CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter. Named in 4 threat reports. Priority 77.4 of 100.</description><category>kev</category><category>public-exploit</category><category>T1204.001</category><category>T1059</category></item><item><title>[KEV] CVE-2022-21971: Microsoft Windows Runtime Remote Code Execution Vulnerability</title><link>https://patchfirst.co/cve/CVE-2022-21971/</link><guid isPermaLink="false">CVE-2022-21971#kev</guid><pubDate>Thu, 18 Aug 2022 00:00:00 GMT</pubDate><description>Microsoft · Windows. In CISA KEV since 2022-08-18. ENISA EUVD lists it as exploited. EPSS 53.8% (higher than 99% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&amp;CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter. Priority 68.3 of 100.</description><category>kev</category><category>public-exploit</category><category>T1204.001</category><category>T1059</category></item><item><title>[KEV] CVE-2012-0767: Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability</title><link>https://patchfirst.co/cve/CVE-2012-0767/</link><guid isPermaLink="false">CVE-2012-0767#kev</guid><pubDate>Wed, 08 Jun 2022 00:00:00 GMT</pubDate><description>Adobe · Flash Player. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 6.2% (higher than 93.5% of CVEs). CVSS 6.1 MEDIUM. ATT&amp;CK: T1204.001 Malicious Link; T1185 Browser Session Hijacking; T1098 Account Manipulation; T1114.002 Remote Email Collection. Priority 46.0 of 100.</description><category>kev</category><category>T1204.001</category><category>T1185</category><category>T1098</category><category>T1114.002</category></item><item><title>[KEV] CVE-2019-18426: WhatsApp Cross-Site Scripting Vulnerability</title><link>https://patchfirst.co/cve/CVE-2019-18426/</link><guid isPermaLink="false">CVE-2019-18426#kev</guid><pubDate>Mon, 23 May 2022 00:00:00 GMT</pubDate><description>Meta Platforms · WhatsApp. In CISA KEV since 2022-05-23. ENISA EUVD lists it as exploited. EPSS 67.9% (higher than 99.32% of CVEs). CVSS 8.2 HIGH. Public exploit code exists. ATT&amp;CK: T1204.001 Malicious Link; T1005 Data from Local System; T1059.007 JavaScript. Priority 78.6 of 100.</description><category>kev</category><category>public-exploit</category><category>T1204.001</category><category>T1005</category><category>T1059.007</category></item><item><title>[KEV] CVE-2018-8414: Microsoft Windows Shell Remote Code Execution Vulnerability</title><link>https://patchfirst.co/cve/CVE-2018-8414/</link><guid isPermaLink="false">CVE-2018-8414#kev</guid><pubDate>Fri, 25 Mar 2022 00:00:00 GMT</pubDate><description>Microsoft · Windows. In CISA KEV since 2022-03-25. ENISA EUVD lists it as exploited. EPSS 72.6% (higher than 99.44% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&amp;CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter. Priority 69.0 of 100.</description><category>kev</category><category>public-exploit</category><category>T1204.001</category><category>T1059</category></item><item><title>[KEV] CVE-2022-24682: Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability</title><link>https://patchfirst.co/cve/CVE-2022-24682/</link><guid isPermaLink="false">CVE-2022-24682#kev</guid><pubDate>Fri, 25 Feb 2022 00:00:00 GMT</pubDate><description>Synacor · Zimbra Collaborate Suite (ZCS). In CISA KEV since 2022-02-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 30.9% (higher than 98.3% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&amp;CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 76.9 of 100.</description><category>kev</category><category>ransomware</category><category>public-exploit</category><category>T1204.001</category><category>T1059.007</category><category>T1185</category></item><item><title>[KEV] CVE-2017-8464: Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability</title><link>https://patchfirst.co/cve/CVE-2017-8464/</link><guid isPermaLink="false">CVE-2017-8464#kev</guid><pubDate>Thu, 10 Feb 2022 00:00:00 GMT</pubDate><description>Microsoft · Windows. In CISA KEV since 2022-02-10. ENISA EUVD lists it as exploited. EPSS 90.0% (higher than 99.79% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&amp;CK: T1204.001 Malicious Link; T1203 Exploitation for Client Execution. Priority 69.1 of 100.</description><category>kev</category><category>public-exploit</category><category>T1204.001</category><category>T1203</category></item><item><title>CVE-2021-38000: Google Chromium Intents Improper Input Validation Vulnerability</title><link>https://patchfirst.co/cve/CVE-2021-38000/</link><guid isPermaLink="false">CVE-2021-38000</guid><pubDate>Tue, 23 Nov 2021 00:00:00 GMT</pubDate><description>Google · Chromium Intents. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 4.9% (higher than 92.2% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&amp;CK: T1189 Drive-by Compromise; T1204.001 Malicious Link. Priority 65.7 of 100.</description><category>kev</category><category>public-exploit</category><category>T1189</category><category>T1204.001</category></item><item><title>[KEV] CVE-2020-3580: Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability</title><link>https://patchfirst.co/cve/CVE-2020-3580/</link><guid isPermaLink="false">CVE-2020-3580#kev</guid><pubDate>Wed, 03 Nov 2021 00:00:00 GMT</pubDate><description>Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD). In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 85.6% (higher than 99.72% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&amp;CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter; T1217 Browser Information Discovery. Priority 77.2 of 100.</description><category>kev</category><category>ransomware</category><category>public-exploit</category><category>T1204.001</category><category>T1059</category><category>T1217</category></item><item><title>[KEV] CVE-2019-0541: Microsoft MSHTML Remote Code Execution Vulnerability</title><link>https://patchfirst.co/cve/CVE-2019-0541/</link><guid isPermaLink="false">CVE-2019-0541#kev</guid><pubDate>Wed, 03 Nov 2021 00:00:00 GMT</pubDate><description>Microsoft · MSHTML. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 53.2% (higher than 99% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&amp;CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter. Priority 69.0 of 100.</description><category>kev</category><category>public-exploit</category><category>T1204.001</category><category>T1059</category></item><item><title>[KEV] CVE-2016-0185: Microsoft Windows Media Center Remote Code Execution Vulnerability</title><link>https://patchfirst.co/cve/CVE-2016-0185/</link><guid isPermaLink="false">CVE-2016-0185#kev</guid><pubDate>Wed, 03 Nov 2021 00:00:00 GMT</pubDate><description>Microsoft · Windows. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 69.8% (higher than 99.37% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&amp;CK: T1204.001 Malicious Link; T1203 Exploitation for Client Execution. Priority 68.3 of 100.</description><category>kev</category><category>public-exploit</category><category>T1204.001</category><category>T1203</category></item><item><title>[KEV] CVE-2020-9818: Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability</title><link>https://patchfirst.co/cve/CVE-2020-9818/</link><guid isPermaLink="false">CVE-2020-9818#kev</guid><pubDate>Wed, 03 Nov 2021 00:00:00 GMT</pubDate><description>Apple · iOS, iPadOS, and watchOS. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 2.3% (higher than 83.6% of CVEs). CVSS 8.8 HIGH. ATT&amp;CK: T1204.001 Malicious Link; T1499.004 Application or System Exploitation. Priority 60.9 of 100.</description><category>kev</category><category>T1204.001</category><category>T1499.004</category></item><item><title>[KEV] CVE-2020-9819: Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability</title><link>https://patchfirst.co/cve/CVE-2020-9819/</link><guid isPermaLink="false">CVE-2020-9819#kev</guid><pubDate>Wed, 03 Nov 2021 00:00:00 GMT</pubDate><description>Apple · iOS, iPadOS, and watchOS. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 2.2% (higher than 82.7% of CVEs). CVSS 4.3 MEDIUM. ATT&amp;CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter. Priority 57.6 of 100.</description><category>kev</category><category>T1204.001</category><category>T1059</category></item><item><title>CVE-2019-16009: Cisco IOS and Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability</title><link>https://patchfirst.co/cve/CVE-2019-16009/</link><guid isPermaLink="false">CVE-2019-16009</guid><pubDate>Wed, 23 Sep 2020 00:00:00 GMT</pubDate><description>Cisco · Cisco IOS 12.2(15)B. Not in CISA KEV. EPSS 1.0% (higher than 62% of CVEs). CVSS 8.8 HIGH. ATT&amp;CK: T1204.001 Malicious Link; T1608 Stage Capabilities. Priority 19.9 of 100.</description><category>T1204.001</category><category>T1608</category></item><item><title>CVE-2020-3137: Cisco Email Security Appliance Cross-Site Scripting Vulnerability</title><link>https://patchfirst.co/cve/CVE-2020-3137/</link><guid isPermaLink="false">CVE-2020-3137</guid><pubDate>Wed, 23 Sep 2020 00:00:00 GMT</pubDate><description>Cisco · Cisco Email Security Appliance (ESA). Not in CISA KEV. EPSS 0.8% (higher than 57.8% of CVEs). CVSS 6.1 MEDIUM. ATT&amp;CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 15.8 of 100.</description><category>T1204.001</category><category>T1059.007</category><category>T1557</category></item><item><title>CVE-2020-15182: Cross-site Request Forgery leading to RCE in SOY CMS</title><link>https://patchfirst.co/cve/CVE-2020-15182/</link><guid isPermaLink="false">CVE-2020-15182</guid><pubDate>Thu, 17 Sep 2020 00:00:00 GMT</pubDate><description>inunosinsi · soycms. Not in CISA KEV. EPSS 1.2% (higher than 67.4% of CVEs). CVSS 8.4 HIGH. ATT&amp;CK: T1204.001 Malicious Link; T1068 Exploitation for Privilege Escalation. Priority 19.4 of 100.</description><category>T1204.001</category><category>T1068</category></item><item><title>CVE-2020-3349: Cisco Data Center Network Manager Cross-Site Scripting Vulnerabilities</title><link>https://patchfirst.co/cve/CVE-2020-3349/</link><guid isPermaLink="false">CVE-2020-3349</guid><pubDate>Thu, 16 Jul 2020 00:00:00 GMT</pubDate><description>Cisco · Cisco Data Center Network Manager. Not in CISA KEV. EPSS 0.6% (higher than 49.8% of CVEs). CVSS 4.8 MEDIUM. ATT&amp;CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 13.3 of 100.</description><category>T1204.001</category><category>T1059.007</category><category>T1557</category></item><item><title>CVE-2020-3356: Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability</title><link>https://patchfirst.co/cve/CVE-2020-3356/</link><guid isPermaLink="false">CVE-2020-3356</guid><pubDate>Thu, 18 Jun 2020 00:00:00 GMT</pubDate><description>Cisco · Cisco Data Center Network Manager. Not in CISA KEV. EPSS 0.8% (higher than 56.6% of CVEs). CVSS 6.1 MEDIUM. ATT&amp;CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 15.6 of 100.</description><category>T1204.001</category><category>T1059.007</category><category>T1557</category></item><item><title>CVE-2020-11082: Cross-Site Scripting in Kaminari</title><link>https://patchfirst.co/cve/CVE-2020-11082/</link><guid isPermaLink="false">CVE-2020-11082</guid><pubDate>Thu, 28 May 2020 00:00:00 GMT</pubDate><description>kaminari · Kaminari. Not in CISA KEV. EPSS 1.5% (higher than 75% of CVEs). CVSS 6.4 MEDIUM. ATT&amp;CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 19.5 of 100.</description><category>T1204.001</category><category>T1059.007</category><category>T1557</category></item><item><title>CVE-2020-12038: Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx…</title><link>https://patchfirst.co/cve/CVE-2020-12038/</link><guid isPermaLink="false">CVE-2020-12038</guid><pubDate>Tue, 19 May 2020 00:00:00 GMT</pubDate><description>Not in CISA KEV. EPSS 2.6% (higher than 85.1% of CVEs). ATT&amp;CK: T1204.001 Malicious Link; T1499.004 Application or System Exploitation. Priority 17.0 of 100.</description><category>T1204.001</category><category>T1499.004</category></item><item><title>CVE-2020-5336: RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability</title><link>https://patchfirst.co/cve/CVE-2020-5336/</link><guid isPermaLink="false">CVE-2020-5336</guid><pubDate>Mon, 04 May 2020 00:00:00 GMT</pubDate><description>Dell · RSA Archer. Not in CISA KEV. EPSS 0.7% (higher than 53.3% of CVEs). CVSS 4.6 MEDIUM. ATT&amp;CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 13.9 of 100.</description><category>T1204.001</category><category>T1059.007</category><category>T1557</category></item><item><title>CVE-2020-5269: Reflected XSS on AdminFeatures page of PrestaShop</title><link>https://patchfirst.co/cve/CVE-2020-5269/</link><guid isPermaLink="false">CVE-2020-5269</guid><pubDate>Mon, 20 Apr 2020 00:00:00 GMT</pubDate><description>PrestaShop · PrestaShop. Not in CISA KEV. EPSS 0.8% (higher than 56.8% of CVEs). CVSS 4.1 MEDIUM. ATT&amp;CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 14.2 of 100.</description><category>T1204.001</category><category>T1059.007</category><category>T1557</category></item><item><title>CVE-2020-5271: Reflected XSS with dashboard calendar of PrestaShop</title><link>https://patchfirst.co/cve/CVE-2020-5271/</link><guid isPermaLink="false">CVE-2020-5271</guid><pubDate>Mon, 20 Apr 2020 00:00:00 GMT</pubDate><description>PrestaShop · PrestaShop. Not in CISA KEV. EPSS 0.8% (higher than 56.8% of CVEs). CVSS 4.1 MEDIUM. ATT&amp;CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 14.2 of 100.</description><category>T1204.001</category><category>T1059.007</category><category>T1557</category></item><item><title>CVE-2020-5264: Reflected XSS in security compromised page of PrestaShop</title><link>https://patchfirst.co/cve/CVE-2020-5264/</link><guid isPermaLink="false">CVE-2020-5264</guid><pubDate>Mon, 20 Apr 2020 00:00:00 GMT</pubDate><description>PrestaShop · PrestaShop. Not in CISA KEV. EPSS 0.8% (higher than 55.1% of CVEs). CVSS 4.4 MEDIUM. ATT&amp;CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 14.1 of 100.</description><category>T1204.001</category><category>T1059.007</category><category>T1557</category></item><item><title>CVE-2020-3121: Cisco Small Business Smart and Managed Switches Cross-Site Scripting Vulnerability</title><link>https://patchfirst.co/cve/CVE-2020-3121/</link><guid isPermaLink="false">CVE-2020-3121</guid><pubDate>Sun, 26 Jan 2020 00:00:00 GMT</pubDate><description>Cisco · Cisco 550X Series Stackable Managed Switches. Not in CISA KEV. EPSS 1.1% (higher than 64.7% of CVEs). CVSS 6.1 MEDIUM. ATT&amp;CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 17.2 of 100.</description><category>T1204.001</category><category>T1059.007</category><category>T1557</category></item></channel></rss>