https://patchfirst.co/technique/T1499/New and newly exploited CVEs that lead to ATT&CK T1499 Endpoint Denial of Service, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-28318/CVE-2026-28318#kevFri, 05 Jun 2026 00:00:00 GMTSolarWinds · Serv-U. In CISA KEV since 2026-06-05. ENISA EUVD lists it as exploited. EPSS 43.7% (higher than 98.7% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 73.0 of 100.kevpublic-exploitT1190T1499https://patchfirst.co/cve/CVE-2026-45498/CVE-2026-45498#kevWed, 20 May 2026 00:00:00 GMTMicrosoft · Defender. In CISA KEV since 2026-05-20. ENISA EUVD lists it as exploited. EPSS 63.1% (higher than 99.2% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 73.1 of 100.kevpublic-exploitT1190T1499https://patchfirst.co/cve/CVE-2013-3918/CVE-2013-3918#kevMon, 06 Oct 2025 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2025-10-06. ENISA EUVD lists it as exploited. EPSS 73.7% (higher than 99.47% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution; T1499 Endpoint Denial of Service. Named in 1 threat report. Priority 72.9 of 100.kevpublic-exploitT1189T1203T1499https://patchfirst.co/cve/CVE-2025-7775/CVE-2025-7775#kevTue, 26 Aug 2025 00:00:00 GMTCitrix · NetScaler. In CISA KEV since 2025-08-26. ENISA EUVD lists it as exploited. EPSS 20.7% (higher than 97.5% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1499 Endpoint Denial of Service. Priority 69.4 of 100.kevpublic-exploitT1190T1059T1499https://patchfirst.co/cve/CVE-2024-54085/CVE-2024-54085#kevWed, 25 Jun 2025 00:00:00 GMTAMI · MegaRAC SPx. In CISA KEV since 2025-06-25. ENISA EUVD lists it as exploited. EPSS 60.7% (higher than 99.15% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1210 Exploitation of Remote Services; T1495 Firmware Corruption; T1499 Endpoint Denial of Service; T1608.001 Upload Malware. Priority 69.7 of 100.kevpublic-exploitT1068T1210T1495T1499T1608.001https://patchfirst.co/cve/CVE-2025-42599/CVE-2025-42599#kevMon, 28 Apr 2025 00:00:00 GMTQualitia · Active! Mail. In CISA KEV since 2025-04-28. ENISA EUVD lists it as exploited. EPSS 3.4% (higher than 88.7% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1588.006 Vulnerabilities; T1059 Command and Scripting Interpreter; T1499 Endpoint Denial of Service. Priority 62.6 of 100.kevT1190T1588.006T1059T1499https://patchfirst.co/cve/CVE-2023-6549/CVE-2023-6549#kevWed, 17 Jan 2024 00:00:00 GMTCitrix · NetScaler ADC and NetScaler Gateway. In CISA KEV since 2024-01-17. ENISA EUVD lists it as exploited. EPSS 57.6% (higher than 99.08% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1574 Hijack Execution Flow; T1499 Endpoint Denial of Service. Priority 68.1 of 100.kevpublic-exploitT1574T1499https://patchfirst.co/cve/CVE-2023-44487/CVE-2023-44487#kevTue, 10 Oct 2023 00:00:00 GMTIETF · HTTP/2. In CISA KEV since 2023-10-10. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 68.2 of 100.kevpublic-exploitT1190T1499https://patchfirst.co/cve/CVE-2023-20109/CVE-2023-20109#kevTue, 10 Oct 2023 00:00:00 GMTCisco · IOS and IOS XE. In CISA KEV since 2023-10-10. ENISA EUVD lists it as exploited. EPSS 2.5% (higher than 84.7% of CVEs). CVSS 6.6 MEDIUM. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter; T1499 Endpoint Denial of Service. Priority 59.6 of 100.kevT1078T1059T1499https://patchfirst.co/cve/CVE-2023-38180/CVE-2023-38180#kevWed, 09 Aug 2023 00:00:00 GMTMicrosoft · .NET Core and Visual Studio. In CISA KEV since 2023-08-09. ENISA EUVD lists it as exploited. EPSS 14.1% (higher than 96.6% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 62.6 of 100.kevT1190T1499https://patchfirst.co/cve/CVE-2004-1464/CVE-2004-1464#kevFri, 19 May 2023 00:00:00 GMTCisco · IOS. In CISA KEV since 2023-05-19. ENISA EUVD lists it as exploited. EPSS 4.8% (higher than 92% of CVEs). CVSS 5.9 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 60.5 of 100.kevT1190T1499https://patchfirst.co/cve/CVE-2011-2462/CVE-2011-2462#kevWed, 08 Jun 2022 00:00:00 GMTAdobe · Reader and Acrobat. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 88.6% (higher than 99.77% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1059 Command and Scripting Interpreter; T1499 Endpoint Denial of Service. Named in 1 threat report. Priority 58.7 of 100.kevpublic-exploitT1059T1499https://patchfirst.co/cve/CVE-2013-1690/CVE-2013-1690#kevMon, 28 Mar 2022 00:00:00 GMTMozilla · Firefox and Thunderbird. In CISA KEV since 2022-03-28. ENISA EUVD lists it as exploited. EPSS 69.0% (higher than 99.35% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter; T1499 Endpoint Denial of Service. Priority 69.0 of 100.kevpublic-exploitT1189T1059T1499https://patchfirst.co/cve/CVE-2018-0151/CVE-2018-0151#kevThu, 03 Mar 2022 00:00:00 GMTCisco · IOS and IOS XE Software. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 14.2% (higher than 96.6% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1499 Endpoint Denial of Service. Priority 64.2 of 100.kevT1190T1059T1499https://patchfirst.co/cve/CVE-2017-6738/CVE-2017-6738#kevThu, 03 Mar 2022 00:00:00 GMTCisco · IOS and IOS XE Software. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 10.9% (higher than 95.9% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1499 Endpoint Denial of Service. Priority 63.3 of 100.kevT1190T1059T1499https://patchfirst.co/cve/CVE-2018-0154/CVE-2018-0154#kevThu, 03 Mar 2022 00:00:00 GMTCisco · IOS Software. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 7.1% (higher than 94.2% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 62.1 of 100.kevT1190T1499https://patchfirst.co/cve/CVE-2017-6627/CVE-2017-6627#kevThu, 03 Mar 2022 00:00:00 GMTCisco · IOS and IOS XE Software. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 6.2% (higher than 93.5% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 61.9 of 100.kevT1190T1499https://patchfirst.co/cve/CVE-2018-0175/CVE-2018-0175#kevThu, 03 Mar 2022 00:00:00 GMTCisco · IOS, XR, and XE Software. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 3.5% (higher than 89.1% of CVEs). CVSS 8.0 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1499 Endpoint Denial of Service. Priority 61.4 of 100.kevT1068T1499https://patchfirst.co/cve/CVE-2018-0179/CVE-2018-0179#kevThu, 03 Mar 2022 00:00:00 GMTCisco · IOS Software. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 4.9% (higher than 92.1% of CVEs). CVSS 5.9 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 60.6 of 100.kevT1190T1499https://patchfirst.co/cve/CVE-2021-35394/CVE-2021-35394#kevFri, 10 Dec 2021 00:00:00 GMTRealtek · Jungle Software Development Kit (SDK). In CISA KEV since 2021-12-10. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.96% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1071.001 Web Protocols; T1105 Ingress Tool Transfer; T1496 Resource Hijacking; T1499 Endpoint Denial of Service; +1 more. Priority 69.9 of 100.kevpublic-exploitT1190T1059T1071.001T1105T1496T1499T1569.002https://patchfirst.co/cve/CVE-2020-5735/CVE-2020-5735#kevWed, 03 Nov 2021 00:00:00 GMTAmcrest · Cameras and Network Video Recorder (NVR). In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 36.2% (higher than 98.5% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1574 Hijack Execution Flow; T1499 Endpoint Denial of Service. Priority 68.9 of 100.kevpublic-exploitT1574T1499https://patchfirst.co/cve/CVE-2020-3569/CVE-2020-3569#kevWed, 03 Nov 2021 00:00:00 GMTCisco · IOS XR. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 3.3% (higher than 88.6% of CVEs). CVSS 8.6 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 61.7 of 100.kevT1190T1499https://patchfirst.co/cve/CVE-2021-1906/CVE-2021-1906#kevWed, 03 Nov 2021 00:00:00 GMTQualcomm · Multiple Chipsets. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 0.5% (higher than 44.1% of CVEs). CVSS 5.5 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1499 Endpoint Denial of Service. Priority 50.7 of 100.kevT1068T1499https://patchfirst.co/cve/CVE-2020-14508/CVE-2020-14508Tue, 25 Aug 2020 00:00:00 GMTSecomea · GateManager. Not in CISA KEV. EPSS 2.0% (higher than 80.9% of CVEs). CVSS 8.1 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1499 Endpoint Denial of Service. Priority 21.8 of 100.T1190T1059T1499https://patchfirst.co/cve/CVE-2020-3306/CVE-2020-3306Wed, 06 May 2020 00:00:00 GMTCisco · Cisco Adaptive Security Appliance (ASA) Software. Not in CISA KEV. EPSS 1.2% (higher than 69.3% of CVEs). CVSS 6.8 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 18.6 of 100.T1190T1499https://patchfirst.co/cve/CVE-2020-6986/CVE-2020-6986Thu, 05 Mar 2020 00:00:00 GMTNot in CISA KEV. EPSS 1.6% (higher than 75.7% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1499 Endpoint Denial of Service. Priority 20.4 of 100.T1499https://patchfirst.co/cve/CVE-2020-3120/CVE-2020-3120Wed, 05 Feb 2020 00:00:00 GMTCisco · Cisco IOS XR Software. Not in CISA KEV. EPSS 1.6% (higher than 76.3% of CVEs). CVSS 7.4 HIGH. Public exploit code exists. ATT&CK: T1499 Endpoint Denial of Service. Priority 25.4 of 100.public-exploitT1499https://patchfirst.co/cve/CVE-2019-15956/CVE-2019-15956Tue, 26 Nov 2019 00:00:00 GMTCisco · Cisco Web Security Appliance (WSA). Not in CISA KEV. EPSS 1.0% (higher than 62.2% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1078 Valid Accounts; T1190 Exploit Public-Facing Application; T1098 Account Manipulation; T1499 Endpoint Denial of Service. Priority 18.6 of 100.T1078T1190T1098T1499https://patchfirst.co/cve/CVE-2019-13555/CVE-2019-13555Wed, 13 Nov 2019 00:00:00 GMTNot in CISA KEV. EPSS 1.5% (higher than 74.6% of CVEs). ATT&CK: T1499 Endpoint Denial of Service. Priority 14.9 of 100.T1499https://patchfirst.co/cve/CVE-2018-15462/CVE-2018-15462Fri, 03 May 2019 00:00:00 GMTCisco · Cisco Firepower Threat Defense Software. Not in CISA KEV. EPSS 2.1% (higher than 81.4% of CVEs). CVSS 8.6 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 22.3 of 100.T1190T1499https://patchfirst.co/cve/CVE-2019-1704/CVE-2019-1704Fri, 03 May 2019 00:00:00 GMTCisco · Cisco Firepower Threat Defense Software. Not in CISA KEV. EPSS 2.3% (higher than 82.9% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 21.8 of 100.T1190T1499https://patchfirst.co/cve/CVE-2018-19010/CVE-2018-19010Mon, 28 Jan 2019 00:00:00 GMTICS-CERT · Dräger Infinity Delta. Not in CISA KEV. EPSS 0.8% (higher than 55.3% of CVEs). ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 11.1 of 100.T1190T1499https://patchfirst.co/cve/CVE-2018-15772/CVE-2018-15772Tue, 13 Nov 2018 00:00:00 GMTDell EMC · Dell EMC RecoverPoint. Not in CISA KEV. EPSS 0.4% (higher than 35.7% of CVEs). ATT&CK: T1499 Endpoint Denial of Service. Priority 7.1 of 100.T1499