https://patchfirst.co/technique/T1485/New and newly exploited CVEs that lead to ATT&CK T1485 Data Destruction, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2023-49105/CVE-2023-49105#kevThu, 27 Aug 2026 00:00:00 GMTownCloud · ownCloud. In CISA KEV since 2026-08-27. ENISA EUVD lists it as exploited. EPSS 43.2% (higher than 98.7% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System; T1485 Data Destruction. Priority 79.6 of 100.kevpublic-exploitT1190T1005T1485https://patchfirst.co/cve/CVE-2025-25257/CVE-2025-25257#kevFri, 18 Jul 2025 00:00:00 GMTFortinet · FortiWeb. In CISA KEV since 2025-07-18. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1055 Process Injection; T1068 Exploitation for Privilege Escalation; T1190 Exploit Public-Facing Application; T1059.004 Unix Shell; T1485 Data Destruction. Priority 69.9 of 100.kevpublic-exploitT1055T1068T1190T1059.004T1485https://patchfirst.co/cve/CVE-2025-25181/CVE-2025-25181#kevMon, 10 Mar 2025 00:00:00 GMTAdvantive · VeraCore. In CISA KEV since 2025-03-10. ENISA EUVD lists it as exploited. EPSS 55.5% (higher than 99.04% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1055 Process Injection; T1068 Exploitation for Privilege Escalation; T1485 Data Destruction. Priority 68.1 of 100.kevpublic-exploitT1055T1068T1485https://patchfirst.co/cve/CVE-2025-21391/CVE-2025-21391#kevTue, 11 Feb 2025 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2025-02-11. ENISA EUVD lists it as exploited. EPSS 2.3% (higher than 83.1% of CVEs). CVSS 7.1 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1485 Data Destruction; T1490 Inhibit System Recovery. Priority 59.6 of 100.kevT1068T1485T1490https://patchfirst.co/cve/CVE-2021-39226/CVE-2021-39226#kevThu, 25 Aug 2022 00:00:00 GMTGrafana Labs · Grafana. In CISA KEV since 2022-08-25. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 7.3 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1485 Data Destruction. Priority 68.1 of 100.kevpublic-exploitT1190T1485https://patchfirst.co/cve/CVE-2022-23134/CVE-2022-23134#kevTue, 22 Feb 2022 00:00:00 GMTZabbix · Frontend. In CISA KEV since 2022-02-22. ENISA EUVD lists it as exploited. EPSS 95.3% (higher than 99.87% of CVEs). CVSS 5.3 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1485 Data Destruction. Priority 66.7 of 100.kevpublic-exploitT1190T1485https://patchfirst.co/cve/CVE-2018-7600/CVE-2018-7600#kevWed, 03 Nov 2021 00:00:00 GMTDrupal · Drupal Core. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.98% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1485 Data Destruction; T1496 Resource Hijacking. Named in 1 threat report. Priority 83.7 of 100.kevransomwarepublic-exploitT1190T1059T1485T1496https://patchfirst.co/cve/CVE-2021-22986/CVE-2021-22986#kevWed, 03 Nov 2021 00:00:00 GMTF5 · BIG-IP and BIG-IQ Centralized Management. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1090 Proxy; T1485 Data Destruction. Priority 79.9 of 100.kevransomwarepublic-exploitT1133T1190T1059T1090T1485https://patchfirst.co/cve/CVE-2016-3715/CVE-2016-3715#kevWed, 03 Nov 2021 00:00:00 GMTImageMagick · ImageMagick. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 75.3% (higher than 99.51% of CVEs). CVSS 5.5 MEDIUM. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1485 Data Destruction. Priority 66.8 of 100.kevpublic-exploitT1204.002T1485https://patchfirst.co/cve/CVE-2020-16874/CVE-2020-16874Fri, 11 Sep 2020 00:00:00 GMTMicrosoft · Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6). Not in CISA KEV. EPSS 4.3% (higher than 91.1% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.002 Malicious File; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; T1485 Data Destruction; +1 more. Priority 24.4 of 100.T1204.002T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2020-1569/CVE-2020-1569Mon, 17 Aug 2020 00:00:00 GMTMicrosoft · Microsoft Edge (EdgeHTML-based). Not in CISA KEV. EPSS 3.0% (higher than 87.3% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 23.6 of 100.T1204.002T1566T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2020-1495/CVE-2020-1495Mon, 17 Aug 2020 00:00:00 GMTMicrosoft · Microsoft SharePoint Server 2010 Service Pack 2. Not in CISA KEV. EPSS 4.2% (higher than 91% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 18.9 of 100.T1204.002T1566T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2020-1456/CVE-2020-1456Tue, 14 Jul 2020 00:00:00 GMTMicrosoft · Microsoft SharePoint Enterprise Server. Not in CISA KEV. EPSS 2.2% (higher than 82.7% of CVEs). CVSS 5.4 MEDIUM. ATT&CK: T1059 Command and Scripting Interpreter; T1005 Data from Local System; T1036 Masquerading; T1485 Data Destruction; T1565 Data Manipulation. Priority 21.0 of 100.T1059T1005T1036T1485T1565https://patchfirst.co/cve/CVE-2020-1163/CVE-2020-1163Tue, 09 Jun 2020 00:00:00 GMTMicrosoft · Microsoft Forefront Endpoint Protection. Not in CISA KEV. EPSS 0.9% (higher than 59.2% of CVEs). ATT&CK: T1485 Data Destruction. Priority 11.8 of 100.T1485https://patchfirst.co/cve/CVE-2020-1109/CVE-2020-1109Thu, 21 May 2020 00:00:00 GMTMicrosoft · Windows 10 Version 1709. Not in CISA KEV. EPSS 1.0% (higher than 62.6% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; T1485 Data Destruction; T1565 Data Manipulation. Priority 18.0 of 100.T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2020-1111/CVE-2020-1111Thu, 21 May 2020 00:00:00 GMTMicrosoft · Windows 10 Version 1809. Not in CISA KEV. EPSS 1.0% (higher than 61.3% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1005 Data from Local System; T1136 Create Account; T1485 Data Destruction; T1565 Data Manipulation. Priority 17.7 of 100.T1068T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2020-0671/CVE-2020-0671Tue, 11 Feb 2020 00:00:00 GMTMicrosoft · Windows. Not in CISA KEV. EPSS 1.4% (higher than 71.8% of CVEs). ATT&CK: T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; T1485 Data Destruction; T1565 Data Manipulation. Priority 15.0 of 100.T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2019-3750/CVE-2019-3750Tue, 03 Dec 2019 00:00:00 GMTDell · Dell Command Update (DCU). Not in CISA KEV. EPSS 0.3% (higher than 24.9% of CVEs). CVSS 5.6 MEDIUM. ATT&CK: T1485 Data Destruction. Priority 8.9 of 100.T1485https://patchfirst.co/cve/CVE-2019-1270/CVE-2019-1270Wed, 11 Sep 2019 00:00:00 GMTMicrosoft · Windows. Not in CISA KEV. EPSS 0.9% (higher than 59.6% of CVEs). ATT&CK: T1202 Indirect Command Execution; T1485 Data Destruction; T1565 Data Manipulation. Priority 11.9 of 100.T1202T1485T1565https://patchfirst.co/cve/CVE-2019-1118/CVE-2019-1118Mon, 29 Jul 2019 00:00:00 GMTMicrosoft · Windows. Not in CISA KEV. EPSS 23.6% (higher than 97.8% of CVEs). Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1204.002 Malicious File; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 24.6 of 100.public-exploitT1189T1204.002T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2019-1031/CVE-2019-1031Wed, 12 Jun 2019 00:00:00 GMTMicrosoft · Microsoft SharePoint Enterprise Server 2016. Not in CISA KEV. EPSS 1.7% (higher than 76.7% of CVEs). ATT&CK: T1059 Command and Scripting Interpreter; T1005 Data from Local System; T1036 Masquerading; T1485 Data Destruction; T1565 Data Manipulation. Priority 15.3 of 100.T1059T1005T1036T1485T1565https://patchfirst.co/cve/CVE-2019-3723/CVE-2019-3723Thu, 06 Jun 2019 00:00:00 GMTDell EMC · OpenManage Server Administrator. Not in CISA KEV. EPSS 1.8% (higher than 79.1% of CVEs). CVSS 9.1 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1485 Data Destruction; T1059 Command and Scripting Interpreter; T1574 Hijack Execution Flow. Priority 22.2 of 100.T1190T1485T1059T1574https://patchfirst.co/cve/CVE-2019-0609/CVE-2019-0609Mon, 08 Apr 2019 00:00:00 GMTMicrosoft · Internet Explorer 11. Not in CISA KEV. EPSS 9.8% (higher than 95.6% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 19.8 of 100.T1204.002T1566T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2018-8575/CVE-2018-8575Wed, 14 Nov 2018 00:00:00 GMTMicrosoft · Microsoft Project. Not in CISA KEV. EPSS 19.5% (higher than 97.4% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1068 Exploitation for Privilege Escalation; T1005 Data from Local System; T1136 Create Account; T1485 Data Destruction; +1 more. Priority 19.5 of 100.T1204.002T1566T1068T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2018-8607/CVE-2018-8607Wed, 14 Nov 2018 00:00:00 GMTMicrosoft · Microsoft Dynamics 365. Not in CISA KEV. EPSS 1.6% (higher than 75.8% of CVEs). ATT&CK: T1059 Command and Scripting Interpreter; T1005 Data from Local System; T1036 Masquerading; T1485 Data Destruction; T1565 Data Manipulation. Priority 15.2 of 100.T1059T1005T1036T1485T1565https://patchfirst.co/cve/CVE-2018-8353/CVE-2018-8353Wed, 15 Aug 2018 00:00:00 GMTNot in CISA KEV. EPSS 67.3% (higher than 99.3% of CVEs). Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 24.9 of 100.public-exploitT1204.002T1566T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2018-8355/CVE-2018-8355Wed, 15 Aug 2018 00:00:00 GMTMicrosoft · ChakraCore. Not in CISA KEV. EPSS 67.9% (higher than 99.32% of CVEs). Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1204.002 Malicious File; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 24.9 of 100.public-exploitT1189T1204.002T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2018-8248/CVE-2018-8248Thu, 14 Jun 2018 00:00:00 GMTMicrosoft · Microsoft Office. Not in CISA KEV. EPSS 21.4% (higher than 97.6% of CVEs). ATT&CK: T1189 Drive-by Compromise; T1204.002 Malicious File; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 19.5 of 100.T1189T1204.002T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2018-8110/CVE-2018-8110Thu, 14 Jun 2018 00:00:00 GMTMicrosoft · Microsoft Edge. Not in CISA KEV. EPSS 16.9% (higher than 97.1% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 19.4 of 100.T1204.002T1566T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2018-8111/CVE-2018-8111Thu, 14 Jun 2018 00:00:00 GMTMicrosoft · Microsoft Edge. Not in CISA KEV. EPSS 16.9% (higher than 97% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 19.4 of 100.T1204.002T1566T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2018-5459/CVE-2018-5459Tue, 13 Feb 2018 00:00:00 GMTNot in CISA KEV. EPSS 2.7% (higher than 85.8% of CVEs). ATT&CK: T1005 Data from Local System; T1485 Data Destruction; T1565.001 Stored Data Manipulation. Priority 17.2 of 100.T1005T1485T1565.001