https://patchfirst.co/technique/T1490/New and newly exploited CVEs that lead to ATT&CK T1490 Inhibit System Recovery, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2025-21391/CVE-2025-21391#kevTue, 11 Feb 2025 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2025-02-11. ENISA EUVD lists it as exploited. EPSS 2.3% (higher than 83.1% of CVEs). CVSS 7.1 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1485 Data Destruction; T1490 Inhibit System Recovery. Priority 59.6 of 100.kevT1068T1485T1490https://patchfirst.co/cve/CVE-2023-36884/CVE-2023-36884#kevMon, 17 Jul 2023 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2023-07-17, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.4% (higher than 99.94% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1566 Phishing; T1204.002 Malicious File; T1005 Data from Local System; T1486 Data Encrypted for Impact; T1489 Service Stop; T1490 Inhibit System Recovery; +1 more. Priority 78.2 of 100.kevransomwarepublic-exploitT1566T1204.002T1005T1486T1489T1490T1553.005