https://patchfirst.co/technique/T1548.002/New and newly exploited CVEs that lead to ATT&CK T1548.002 Bypass User Account Control, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2021-31207/CVE-2021-31207#kevWed, 03 Nov 2021 00:00:00 GMTMicrosoft · Exchange Server. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.8% (higher than 99.95% of CVEs). CVSS 6.6 MEDIUM. Public exploit code exists. ATT&CK: T1548.002 Bypass User Account Control; T1565 Data Manipulation. Named in 9 threat reports. Priority 87.6 of 100.kevransomwarepublic-exploitT1548.002T1565