https://patchfirst.co/technique/T1565/New and newly exploited CVEs that lead to ATT&CK T1565 Data Manipulation, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-66384/CVE-2026-66384#kevThu, 27 Aug 2026 00:00:00 GMTJFrog · Artifactory. In CISA KEV since 2026-08-27. ENISA EUVD lists it as exploited. EPSS 0.7% (higher than 51.8% of CVEs). CVSS 5.3 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1565 Data Manipulation. Priority 67.1 of 100.kevpublic-exploitT1190T1565https://patchfirst.co/cve/CVE-2026-32201/CVE-2026-32201#kevTue, 14 Apr 2026 00:00:00 GMTMicrosoft · SharePoint Server. In CISA KEV since 2026-04-14. ENISA EUVD lists it as exploited. EPSS 43.4% (higher than 98.7% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1565 Data Manipulation. Priority 72.3 of 100.kevpublic-exploitT1190T1565https://patchfirst.co/cve/CVE-2025-24993/CVE-2025-24993#kevTue, 11 Mar 2025 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2025-03-11. ENISA EUVD lists it as exploited. EPSS 2.2% (higher than 82.6% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1203 Exploitation for Client Execution; T1204 User Execution; T1055 Process Injection; T1565 Data Manipulation. Priority 60.0 of 100.kevT1068T1203T1204T1055T1565https://patchfirst.co/cve/CVE-2023-28434/CVE-2023-28434#kevTue, 19 Sep 2023 00:00:00 GMTMinIO · MinIO. In CISA KEV since 2023-09-19. ENISA EUVD lists it as exploited. EPSS 7.9% (higher than 94.7% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1565 Data Manipulation. Priority 68.1 of 100.kevpublic-exploitT1078T1565https://patchfirst.co/cve/CVE-2015-4902/CVE-2015-4902#kevThu, 03 Mar 2022 00:00:00 GMTOracle · Java SE. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 13.6% (higher than 96.5% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1565 Data Manipulation; T1190 Exploit Public-Facing Application. Named in 1 threat report. Priority 64.9 of 100.kevT1565T1190https://patchfirst.co/cve/CVE-2021-31207/CVE-2021-31207#kevWed, 03 Nov 2021 00:00:00 GMTMicrosoft · Exchange Server. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.8% (higher than 99.95% of CVEs). CVSS 6.6 MEDIUM. Public exploit code exists. ATT&CK: T1548.002 Bypass User Account Control; T1565 Data Manipulation. Named in 9 threat reports. Priority 87.6 of 100.kevransomwarepublic-exploitT1548.002T1565https://patchfirst.co/cve/CVE-2020-8599/CVE-2020-8599#kevWed, 03 Nov 2021 00:00:00 GMTTrend Micro · Apex One and OfficeScan. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 11.9% (higher than 96.1% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1565 Data Manipulation. Priority 64.1 of 100.kevT1190T1565https://patchfirst.co/cve/CVE-2020-16874/CVE-2020-16874Fri, 11 Sep 2020 00:00:00 GMTMicrosoft · Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6). Not in CISA KEV. EPSS 4.3% (higher than 91.1% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.002 Malicious File; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; T1485 Data Destruction; +1 more. Priority 24.4 of 100.T1204.002T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2020-1569/CVE-2020-1569Mon, 17 Aug 2020 00:00:00 GMTMicrosoft · Microsoft Edge (EdgeHTML-based). Not in CISA KEV. EPSS 3.0% (higher than 87.3% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 23.6 of 100.T1204.002T1566T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2020-1495/CVE-2020-1495Mon, 17 Aug 2020 00:00:00 GMTMicrosoft · Microsoft SharePoint Server 2010 Service Pack 2. Not in CISA KEV. EPSS 4.2% (higher than 91% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 18.9 of 100.T1204.002T1566T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2020-15109/CVE-2020-15109Tue, 04 Aug 2020 00:00:00 GMTsolidusio · solidus. Not in CISA KEV. EPSS 1.0% (higher than 62.7% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1133 External Remote Services; T1190 Exploit Public-Facing Application; T1565 Data Manipulation. Priority 16.3 of 100.T1133T1190T1565https://patchfirst.co/cve/CVE-2020-1456/CVE-2020-1456Tue, 14 Jul 2020 00:00:00 GMTMicrosoft · Microsoft SharePoint Enterprise Server. Not in CISA KEV. EPSS 2.2% (higher than 82.7% of CVEs). CVSS 5.4 MEDIUM. ATT&CK: T1059 Command and Scripting Interpreter; T1005 Data from Local System; T1036 Masquerading; T1485 Data Destruction; T1565 Data Manipulation. Priority 21.0 of 100.T1059T1005T1036T1485T1565https://patchfirst.co/cve/CVE-2020-1109/CVE-2020-1109Thu, 21 May 2020 00:00:00 GMTMicrosoft · Windows 10 Version 1709. Not in CISA KEV. EPSS 1.0% (higher than 62.6% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; T1485 Data Destruction; T1565 Data Manipulation. Priority 18.0 of 100.T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2020-1068/CVE-2020-1068Thu, 21 May 2020 00:00:00 GMTMicrosoft · Windows 10 Version 1507. Not in CISA KEV. EPSS 1.0% (higher than 61.3% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1565 Data Manipulation. Priority 17.7 of 100.T1565https://patchfirst.co/cve/CVE-2020-1111/CVE-2020-1111Thu, 21 May 2020 00:00:00 GMTMicrosoft · Windows 10 Version 1809. Not in CISA KEV. EPSS 1.0% (higher than 61.3% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1005 Data from Local System; T1136 Create Account; T1485 Data Destruction; T1565 Data Manipulation. Priority 17.7 of 100.T1068T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2020-0671/CVE-2020-0671Tue, 11 Feb 2020 00:00:00 GMTMicrosoft · Windows. Not in CISA KEV. EPSS 1.4% (higher than 71.8% of CVEs). ATT&CK: T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; T1485 Data Destruction; T1565 Data Manipulation. Priority 15.0 of 100.T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2020-5225/CVE-2020-5225Fri, 24 Jan 2020 00:00:00 GMTsimplesamlphp · SimpleSAMLphp. Not in CISA KEV. EPSS 0.7% (higher than 51.5% of CVEs). CVSS 4.4 MEDIUM. ATT&CK: T1565 Data Manipulation. Priority 13.4 of 100.T1565https://patchfirst.co/cve/CVE-2019-1423/CVE-2019-1423Tue, 12 Nov 2019 00:00:00 GMTMicrosoft · Windows 10 Version 1903 for 32-bit Systems. Not in CISA KEV. EPSS 1.4% (higher than 73% of CVEs). ATT&CK: T1565 Data Manipulation; T1068 Exploitation for Privilege Escalation. Priority 15.3 of 100.T1565T1068https://patchfirst.co/cve/CVE-2019-1270/CVE-2019-1270Wed, 11 Sep 2019 00:00:00 GMTMicrosoft · Windows. Not in CISA KEV. EPSS 0.9% (higher than 59.6% of CVEs). ATT&CK: T1202 Indirect Command Execution; T1485 Data Destruction; T1565 Data Manipulation. Priority 11.9 of 100.T1202T1485T1565https://patchfirst.co/cve/CVE-2019-1118/CVE-2019-1118Mon, 29 Jul 2019 00:00:00 GMTMicrosoft · Windows. Not in CISA KEV. EPSS 23.6% (higher than 97.8% of CVEs). Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1204.002 Malicious File; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 24.6 of 100.public-exploitT1189T1204.002T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2019-1031/CVE-2019-1031Wed, 12 Jun 2019 00:00:00 GMTMicrosoft · Microsoft SharePoint Enterprise Server 2016. Not in CISA KEV. EPSS 1.7% (higher than 76.7% of CVEs). ATT&CK: T1059 Command and Scripting Interpreter; T1005 Data from Local System; T1036 Masquerading; T1485 Data Destruction; T1565 Data Manipulation. Priority 15.3 of 100.T1059T1005T1036T1485T1565https://patchfirst.co/cve/CVE-2019-0609/CVE-2019-0609Mon, 08 Apr 2019 00:00:00 GMTMicrosoft · Internet Explorer 11. Not in CISA KEV. EPSS 9.8% (higher than 95.6% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 19.8 of 100.T1204.002T1566T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2018-8575/CVE-2018-8575Wed, 14 Nov 2018 00:00:00 GMTMicrosoft · Microsoft Project. Not in CISA KEV. EPSS 19.5% (higher than 97.4% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1068 Exploitation for Privilege Escalation; T1005 Data from Local System; T1136 Create Account; T1485 Data Destruction; +1 more. Priority 19.5 of 100.T1204.002T1566T1068T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2018-8607/CVE-2018-8607Wed, 14 Nov 2018 00:00:00 GMTMicrosoft · Microsoft Dynamics 365. Not in CISA KEV. EPSS 1.6% (higher than 75.8% of CVEs). ATT&CK: T1059 Command and Scripting Interpreter; T1005 Data from Local System; T1036 Masquerading; T1485 Data Destruction; T1565 Data Manipulation. Priority 15.2 of 100.T1059T1005T1036T1485T1565https://patchfirst.co/cve/CVE-2018-8431/CVE-2018-8431Thu, 13 Sep 2018 00:00:00 GMTMicrosoft · Microsoft SharePoint Server. Not in CISA KEV. EPSS 2.3% (higher than 82.9% of CVEs). ATT&CK: T1190 Exploit Public-Facing Application; T1565 Data Manipulation. Priority 16.6 of 100.T1190T1565https://patchfirst.co/cve/CVE-2018-8353/CVE-2018-8353Wed, 15 Aug 2018 00:00:00 GMTNot in CISA KEV. EPSS 67.3% (higher than 99.3% of CVEs). Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 24.9 of 100.public-exploitT1204.002T1566T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2018-8355/CVE-2018-8355Wed, 15 Aug 2018 00:00:00 GMTMicrosoft · ChakraCore. Not in CISA KEV. EPSS 67.9% (higher than 99.32% of CVEs). Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1204.002 Malicious File; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 24.9 of 100.public-exploitT1189T1204.002T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2018-8248/CVE-2018-8248Thu, 14 Jun 2018 00:00:00 GMTMicrosoft · Microsoft Office. Not in CISA KEV. EPSS 21.4% (higher than 97.6% of CVEs). ATT&CK: T1189 Drive-by Compromise; T1204.002 Malicious File; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 19.5 of 100.T1189T1204.002T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2018-8110/CVE-2018-8110Thu, 14 Jun 2018 00:00:00 GMTMicrosoft · Microsoft Edge. Not in CISA KEV. EPSS 16.9% (higher than 97.1% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 19.4 of 100.T1204.002T1566T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2018-8111/CVE-2018-8111Thu, 14 Jun 2018 00:00:00 GMTMicrosoft · Microsoft Edge. Not in CISA KEV. EPSS 16.9% (higher than 97% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 19.4 of 100.T1204.002T1566T1499.004T1574T1005T1136T1485T1565