<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Patchfirst: CVEs linked to T1553.002 Code Signing</title><link>https://patchfirst.co/technique/T1553.002/</link><atom:link href="https://patchfirst.co/feed/technique/T1553.002.xml" rel="self" type="application/rss+xml"/><description>New and newly exploited CVEs that lead to ATT&amp;CK T1553.002 Code Signing, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.</description><language>en-gb</language><ttl>360</ttl><lastBuildDate>Sat, 31 Oct 2026 05:11:25 GMT</lastBuildDate><item><title>[KEV] CVE-2026-8398: Daemon Tools Lite Embedded Malicious Code Vulnerability</title><link>https://patchfirst.co/cve/CVE-2026-8398/</link><guid isPermaLink="false">CVE-2026-8398#kev</guid><pubDate>Wed, 27 May 2026 00:00:00 GMT</pubDate><description>Daemon · Daemon Tools Lite. In CISA KEV since 2026-05-27. ENISA EUVD lists it as exploited. EPSS 1.5% (higher than 73.5% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&amp;CK: T1195.002 Compromise Software Supply Chain; T1553.002 Code Signing. Priority 69.6 of 100.</description><category>kev</category><category>public-exploit</category><category>T1195.002</category><category>T1553.002</category></item><item><title>[KEV] CVE-2023-41991: Apple Multiple Products Improper Certificate Validation Vulnerability</title><link>https://patchfirst.co/cve/CVE-2023-41991/</link><guid isPermaLink="false">CVE-2023-41991#kev</guid><pubDate>Mon, 25 Sep 2023 00:00:00 GMT</pubDate><description>Apple · Multiple Products. In CISA KEV since 2023-09-25. ENISA EUVD lists it as exploited. EPSS 13.4% (higher than 96.4% of CVEs). CVSS 5.5 MEDIUM. Public exploit code exists. ATT&amp;CK: T1204.002 Malicious File; T1553.002 Code Signing. Priority 66.1 of 100.</description><category>kev</category><category>public-exploit</category><category>T1204.002</category><category>T1553.002</category></item><item><title>[KEV] CVE-2012-0151: Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability</title><link>https://patchfirst.co/cve/CVE-2012-0151/</link><guid isPermaLink="false">CVE-2012-0151#kev</guid><pubDate>Wed, 08 Jun 2022 00:00:00 GMT</pubDate><description>Microsoft · Windows. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 87.7% (higher than 99.76% of CVEs). CVSS 7.8 HIGH. ATT&amp;CK: T1204.002 Malicious File; T1553.002 Code Signing. Priority 63.4 of 100.</description><category>kev</category><category>T1204.002</category><category>T1553.002</category></item><item><title>[KEV] CVE-2013-3900: Microsoft WinVerifyTrust function Remote Code Execution</title><link>https://patchfirst.co/cve/CVE-2013-3900/</link><guid isPermaLink="false">CVE-2013-3900#kev</guid><pubDate>Mon, 10 Jan 2022 00:00:00 GMT</pubDate><description>Microsoft · WinVerifyTrust function. In CISA KEV since 2022-01-10. ENISA EUVD lists it as exploited. EPSS 44.6% (higher than 98.8% of CVEs). CVSS 5.5 MEDIUM. Public exploit code exists. ATT&amp;CK: T1204.002 Malicious File; T1553.002 Code Signing. Named in 1 threat report. Priority 80.5 of 100.</description><category>kev</category><category>public-exploit</category><category>T1204.002</category><category>T1553.002</category></item><item><title>[KEV] CVE-2020-0601: Microsoft Windows CryptoAPI Spoofing Vulnerability</title><link>https://patchfirst.co/cve/CVE-2020-0601/</link><guid isPermaLink="false">CVE-2020-0601#kev</guid><pubDate>Wed, 03 Nov 2021 00:00:00 GMT</pubDate><description>Microsoft · Windows. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 89.1% (higher than 99.78% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&amp;CK: T1553.002 Code Signing; T1036 Masquerading. Priority 78.6 of 100.</description><category>kev</category><category>public-exploit</category><category>T1553.002</category><category>T1036</category></item></channel></rss>