{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: CVEs linked to T1574 Hijack Execution Flow","home_page_url":"https://patchfirst.co/technique/T1574/","feed_url":"https://patchfirst.co/feed/technique/T1574.json","description":"New and newly exploited CVEs that lead to ATT&CK T1574 Hijack Execution Flow, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2025-27363#kev","url":"https://patchfirst.co/cve/CVE-2025-27363/","title":"[KEV] CVE-2025-27363: FreeType Out-of-Bounds Write Vulnerability","content_text":"FreeType · FreeType. In CISA KEV since 2025-05-06. ENISA EUVD lists it as exploited. EPSS 27.8% (higher than 98.1% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1574 Hijack Execution Flow; T1499.004 Application or System Exploitation. Priority 68.3 of 100.","summary":"FreeType Out-of-Bounds Write Vulnerability","date_published":"2025-05-06T00:00:00.000Z","date_modified":"2026-06-17T09:03:27.000Z","tags":["kev","public-exploit","T1574","T1499.004"],"_patchfirst":{"reason":"kev","priority":68.3,"kev":{"dateAdded":"2025-05-06","ransomware":false},"epss":{"score":0.27775,"percentile":0.98089},"cvss":{"score":8.1,"severity":"HIGH","version":"3.1"},"vendor":"FreeType","product":"FreeType","techniqueIds":["T1574","T1499.004"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-21762#kev","url":"https://patchfirst.co/cve/CVE-2024-21762/","title":"[KEV] CVE-2024-21762: Fortinet FortiOS Out-of-Bound Write Vulnerability","content_text":"Fortinet · FortiOS. In CISA KEV since 2024-02-09, known ransomware use. ENISA EUVD lists it as exploited. EPSS 84.6% (higher than 99.7% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1574 Hijack Execution Flow. Priority 79.8 of 100.","summary":"Fortinet FortiOS Out-of-Bound Write Vulnerability","date_published":"2024-02-09T00:00:00.000Z","date_modified":"2026-10-22T19:20:41.000Z","tags":["kev","ransomware","public-exploit","T1190","T1574"],"_patchfirst":{"reason":"kev","priority":79.8,"kev":{"dateAdded":"2024-02-09","ransomware":true},"epss":{"score":0.84589,"percentile":0.99703},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiOS","techniqueIds":["T1190","T1574"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-6549#kev","url":"https://patchfirst.co/cve/CVE-2023-6549/","title":"[KEV] CVE-2023-6549: Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","content_text":"Citrix · NetScaler ADC and NetScaler Gateway. In CISA KEV since 2024-01-17. ENISA EUVD lists it as exploited. EPSS 57.6% (higher than 99.08% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1574 Hijack Execution Flow; T1499 Endpoint Denial of Service. Priority 68.1 of 100.","summary":"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","date_published":"2024-01-17T00:00:00.000Z","date_modified":"2026-06-17T06:50:58.000Z","tags":["kev","public-exploit","T1574","T1499"],"_patchfirst":{"reason":"kev","priority":68.1,"kev":{"dateAdded":"2024-01-17","ransomware":false},"epss":{"score":0.57633,"percentile":0.99082},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Citrix","product":"NetScaler ADC and NetScaler Gateway","techniqueIds":["T1574","T1499"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-7024#kev","url":"https://patchfirst.co/cve/CVE-2023-7024/","title":"[KEV] CVE-2023-7024: Google Chromium WebRTC Heap Buffer Overflow Vulnerability","content_text":"Google · Chromium WebRTC. In CISA KEV since 2024-01-02. ENISA EUVD lists it as exploited. EPSS 6.7% (higher than 93.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1574 Hijack Execution Flow. Priority 67.9 of 100.","summary":"Google Chromium WebRTC Heap Buffer Overflow Vulnerability","date_published":"2024-01-02T00:00:00.000Z","date_modified":"2026-06-17T06:51:53.000Z","tags":["kev","public-exploit","T1189","T1574"],"_patchfirst":{"reason":"kev","priority":67.9,"kev":{"dateAdded":"2024-01-02","ransomware":false},"epss":{"score":0.06671,"percentile":0.93883},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium WebRTC","techniqueIds":["T1189","T1574"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-4966#kev","url":"https://patchfirst.co/cve/CVE-2023-4966/","title":"[KEV] CVE-2023-4966: Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","content_text":"Citrix · NetScaler ADC and NetScaler Gateway. In CISA KEV since 2023-10-18, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1574 Hijack Execution Flow; T1005 Data from Local System. Named in 1 threat report. Priority 82.1 of 100.","summary":"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","date_published":"2023-10-18T00:00:00.000Z","date_modified":"2026-07-31T04:16:44.000Z","tags":["kev","ransomware","public-exploit","T1574","T1005"],"_patchfirst":{"reason":"kev","priority":82.1,"kev":{"dateAdded":"2023-10-18","ransomware":true},"epss":{"score":0.99999,"percentile":0.99997},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Citrix","product":"NetScaler ADC and NetScaler Gateway","techniqueIds":["T1574","T1005"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-5217#kev","url":"https://patchfirst.co/cve/CVE-2023-5217/","title":"[KEV] CVE-2023-5217: Google Chromium libvpx Heap Buffer Overflow Vulnerability","content_text":"Google · Chromium libvpx. In CISA KEV since 2023-10-02. ENISA EUVD lists it as exploited. EPSS 49.0% (higher than 98.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1574 Hijack Execution Flow. Priority 68.9 of 100.","summary":"Google Chromium libvpx Heap Buffer Overflow Vulnerability","date_published":"2023-10-02T00:00:00.000Z","date_modified":"2026-06-17T06:48:06.000Z","tags":["kev","public-exploit","T1204.001","T1574"],"_patchfirst":{"reason":"kev","priority":68.9,"kev":{"dateAdded":"2023-10-02","ransomware":false},"epss":{"score":0.49013,"percentile":0.98879},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium libvpx","techniqueIds":["T1204.001","T1574"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-3519#kev","url":"https://patchfirst.co/cve/CVE-2023-3519/","title":"[KEV] CVE-2023-3519: Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","content_text":"Citrix · NetScaler ADC and NetScaler Gateway. In CISA KEV since 2023-07-19, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.7% (higher than 99.95% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1574 Hijack Execution Flow; T1105 Ingress Tool Transfer; T1087.002 Domain Account. Named in 6 threat reports. Priority 89.9 of 100.","summary":"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","date_published":"2023-07-19T00:00:00.000Z","date_modified":"2026-08-05T05:16:39.000Z","tags":["kev","ransomware","public-exploit","T1190","T1574","T1105","T1087.002"],"_patchfirst":{"reason":"kev","priority":89.9,"kev":{"dateAdded":"2023-07-19","ransomware":true},"epss":{"score":0.99749,"percentile":0.99954},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Citrix","product":"NetScaler ADC and NetScaler Gateway","techniqueIds":["T1190","T1574","T1105","T1087.002"],"reportCount":6,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-27997#kev","url":"https://patchfirst.co/cve/CVE-2023-27997/","title":"[KEV] CVE-2023-27997: Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability","content_text":"Fortinet · FortiOS and FortiProxy SSL-VPN. In CISA KEV since 2023-06-13, known ransomware use. ENISA EUVD lists it as exploited. EPSS 85.7% (higher than 99.72% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1574 Hijack Execution Flow; T1136 Create Account. Named in 1 threat report. Priority 83.7 of 100.","summary":"Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability","date_published":"2023-06-13T00:00:00.000Z","date_modified":"2026-07-31T04:16:43.000Z","tags":["kev","ransomware","public-exploit","T1190","T1574","T1136"],"_patchfirst":{"reason":"kev","priority":83.7,"kev":{"dateAdded":"2023-06-13","ransomware":true},"epss":{"score":0.85689,"percentile":0.99725},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiOS and FortiProxy SSL-VPN","techniqueIds":["T1190","T1574","T1136"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2017-6742#kev","url":"https://patchfirst.co/cve/CVE-2017-6742/","title":"[KEV] CVE-2017-6742: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","content_text":"Cisco · IOS and IOS XE Software. In CISA KEV since 2023-04-19. ENISA EUVD lists it as exploited. EPSS 21.4% (higher than 97.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1574 Hijack Execution Flow; T1059 Command and Scripting Interpreter; T1048 Exfiltration Over Alternative Protocol; T1542.005 TFTP Boot. Priority 68.7 of 100.","summary":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","date_published":"2023-04-19T00:00:00.000Z","date_modified":"2026-06-17T01:22:56.000Z","tags":["kev","public-exploit","T1574","T1059","T1048","T1542.005"],"_patchfirst":{"reason":"kev","priority":68.7,"kev":{"dateAdded":"2023-04-19","ransomware":false},"epss":{"score":0.21424,"percentile":0.97608},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Cisco","product":"IOS and IOS XE Software","techniqueIds":["T1574","T1059","T1048","T1542.005"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-3038#kev","url":"https://patchfirst.co/cve/CVE-2022-3038/","title":"[KEV] CVE-2022-3038: Google Chromium Network Service Use-After-Free Vulnerability","content_text":"Google · Chromium Network Service. In CISA KEV since 2023-03-30. ENISA EUVD lists it as exploited. EPSS 24.9% (higher than 97.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1574 Hijack Execution Flow. Priority 68.7 of 100.","summary":"Google Chromium Network Service Use-After-Free Vulnerability","date_published":"2023-03-30T00:00:00.000Z","date_modified":"2026-06-17T04:58:41.000Z","tags":["kev","public-exploit","T1204.001","T1574"],"_patchfirst":{"reason":"kev","priority":68.7,"kev":{"dateAdded":"2023-03-30","ransomware":false},"epss":{"score":0.24925,"percentile":0.97911},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Chromium Network Service","techniqueIds":["T1204.001","T1574"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-41328#kev","url":"https://patchfirst.co/cve/CVE-2022-41328/","title":"[KEV] CVE-2022-41328: Fortinet FortiOS Path Traversal Vulnerability","content_text":"Fortinet · FortiOS. In CISA KEV since 2023-03-14. ENISA EUVD lists it as exploited. EPSS 10.7% (higher than 95.8% of CVEs). CVSS 7.1 HIGH. ATT&CK: T1574 Hijack Execution Flow; T1037 Boot or Logon Initialization Scripts; T1049 System Network Connections Discovery; T1565.001 Stored Data Manipulation. Named in 1 threat report. Priority 66.0 of 100.","summary":"Fortinet FortiOS Path Traversal Vulnerability","date_published":"2023-03-14T00:00:00.000Z","date_modified":"2026-06-17T05:03:02.000Z","tags":["kev","T1574","T1037","T1049","T1565.001"],"_patchfirst":{"reason":"kev","priority":66,"kev":{"dateAdded":"2023-03-14","ransomware":false},"epss":{"score":0.10682,"percentile":0.95802},"cvss":{"score":7.1,"severity":"HIGH","version":"3.1"},"vendor":"Fortinet","product":"FortiOS","techniqueIds":["T1574","T1037","T1049","T1565.001"],"reportCount":1,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2022-42475","url":"https://patchfirst.co/cve/CVE-2022-42475/","title":"CVE-2022-42475: Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability","content_text":"Fortinet · FortiOS. In CISA KEV since 2022-12-13, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.5% (higher than 99.94% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1574 Hijack Execution Flow; T1071.001 Web Protocols; T1622 Debugger Evasion. Named in 4 threat reports. Priority 88.8 of 100.","summary":"Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability","date_published":"2023-01-02T00:00:00.000Z","date_modified":"2026-06-17T05:04:59.000Z","tags":["kev","ransomware","public-exploit","T1190","T1574","T1071.001","T1622"],"_patchfirst":{"reason":"published","priority":88.8,"kev":{"dateAdded":"2022-12-13","ransomware":true},"epss":{"score":0.99474,"percentile":0.99943},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiOS","techniqueIds":["T1190","T1574","T1071.001","T1622"],"reportCount":4,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-41073","url":"https://patchfirst.co/cve/CVE-2022-41073/","title":"CVE-2022-41073: Microsoft Windows Print Spooler Privilege Escalation Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2022-11-08, known ransomware use. ENISA EUVD lists it as exploited. EPSS 2.4% (higher than 83.8% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1068 Exploitation for Privilege Escalation; T1574 Hijack Execution Flow. Priority 75.2 of 100.","summary":"Microsoft Windows Print Spooler Privilege Escalation Vulnerability","date_published":"2022-11-09T00:00:00.000Z","date_modified":"2026-08-10T16:18:19.000Z","tags":["kev","ransomware","public-exploit","T1078","T1068","T1574"],"_patchfirst":{"reason":"published","priority":75.2,"kev":{"dateAdded":"2022-11-08","ransomware":true},"epss":{"score":0.02362,"percentile":0.83764},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1078","T1068","T1574"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2016-1010#kev","url":"https://patchfirst.co/cve/CVE-2016-1010/","title":"[KEV] CVE-2016-1010: Adobe Flash Player and AIR Integer Overflow Vulnerability","content_text":"Adobe · Flash Player and AIR. In CISA KEV since 2022-05-25. ENISA EUVD lists it as exploited. EPSS 19.3% (higher than 97.3% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1574 Hijack Execution Flow. Named in 1 threat report. Priority 67.5 of 100.","summary":"Adobe Flash Player and AIR Integer Overflow Vulnerability","date_published":"2022-05-25T00:00:00.000Z","date_modified":"2026-06-17T00:41:06.000Z","tags":["kev","T1574"],"_patchfirst":{"reason":"kev","priority":67.5,"kev":{"dateAdded":"2022-05-25","ransomware":false},"epss":{"score":0.19333,"percentile":0.97343},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Adobe","product":"Flash Player and AIR","techniqueIds":["T1574"],"reportCount":1,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2022-1040#kev","url":"https://patchfirst.co/cve/CVE-2022-1040/","title":"[KEV] CVE-2022-1040: Sophos Firewall Authentication Bypass Vulnerability","content_text":"Sophos · Firewall. In CISA KEV since 2022-03-31. ENISA EUVD lists it as exploited. EPSS 99.8% (higher than 99.96% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1040 Network Sniffing; T1078 Valid Accounts; T1557 Adversary-in-the-Middle; T1574 Hijack Execution Flow. Priority 79.9 of 100.","summary":"Sophos Firewall Authentication Bypass Vulnerability","date_published":"2022-03-31T00:00:00.000Z","date_modified":"2026-06-17T04:21:42.000Z","tags":["kev","public-exploit","T1190","T1059","T1040","T1078","T1557","T1574"],"_patchfirst":{"reason":"kev","priority":79.9,"kev":{"dateAdded":"2022-03-31","ransomware":false},"epss":{"score":0.99796,"percentile":0.99957},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Sophos","product":"Firewall","techniqueIds":["T1190","T1059","T1040","T1078","T1557","T1574"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2020-5735#kev","url":"https://patchfirst.co/cve/CVE-2020-5735/","title":"[KEV] CVE-2020-5735: Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability","content_text":"Amcrest · Cameras and Network Video Recorder (NVR). In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 36.2% (higher than 98.5% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1574 Hijack Execution Flow; T1499 Endpoint Denial of Service. Priority 68.9 of 100.","summary":"Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T03:22:08.000Z","tags":["kev","public-exploit","T1574","T1499"],"_patchfirst":{"reason":"kev","priority":68.9,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.36217,"percentile":0.98476},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Amcrest","product":"Cameras and Network Video Recorder (NVR)","techniqueIds":["T1574","T1499"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2019-15752#kev","url":"https://patchfirst.co/cve/CVE-2019-15752/","title":"[KEV] CVE-2019-15752: Docker Desktop Community Edition Privilege Escalation Vulnerability","content_text":"Docker · Desktop Community Edition. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 48.6% (higher than 98.9% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1574 Hijack Execution Flow. Priority 68.2 of 100.","summary":"Docker Desktop Community Edition Privilege Escalation Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T02:21:00.000Z","tags":["kev","public-exploit","T1068","T1574"],"_patchfirst":{"reason":"kev","priority":68.2,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.48628,"percentile":0.98871},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Docker","product":"Desktop Community Edition","techniqueIds":["T1068","T1574"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2020-15208","url":"https://patchfirst.co/cve/CVE-2020-15208/","title":"CVE-2020-15208: Data corruption in tensorflow-lite","content_text":"tensorflow · tensorflow. Not in CISA KEV. EPSS 0.9% (higher than 59.8% of CVEs). CVSS 7.4 HIGH. ATT&CK: T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 17.1 of 100.","summary":"Data corruption in tensorflow-lite","date_published":"2020-09-25T00:00:00.000Z","date_modified":"2024-08-04T13:08:22.000Z","tags":["T1499.004","T1574"],"_patchfirst":{"reason":"published","priority":17.1,"kev":null,"epss":{"score":0.00905,"percentile":0.59771},"cvss":{"score":7.4,"severity":"HIGH","version":"3.1"},"vendor":"tensorflow","product":"tensorflow","techniqueIds":["T1499.004","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-15199","url":"https://patchfirst.co/cve/CVE-2020-15199/","title":"CVE-2020-15199: Denial of Service in Tensorflow","content_text":"tensorflow · tensorflow. Not in CISA KEV. EPSS 0.8% (higher than 56.9% of CVEs). CVSS 5.9 MEDIUM. ATT&CK: T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 15.5 of 100.","summary":"Denial of Service in Tensorflow","date_published":"2020-09-25T00:00:00.000Z","date_modified":"2024-08-04T13:08:22.000Z","tags":["T1499.004","T1574"],"_patchfirst":{"reason":"published","priority":15.5,"kev":null,"epss":{"score":0.00812,"percentile":0.56928},"cvss":{"score":5.9,"severity":"MEDIUM","version":"3.1"},"vendor":"tensorflow","product":"tensorflow","techniqueIds":["T1499.004","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-15211","url":"https://patchfirst.co/cve/CVE-2020-15211/","title":"CVE-2020-15211: Out of bounds access in tensorflow-lite","content_text":"tensorflow · tensorflow. Not in CISA KEV. EPSS 0.9% (higher than 60.2% of CVEs). CVSS 4.8 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1574 Hijack Execution Flow. Priority 15.4 of 100.","summary":"Out of bounds access in tensorflow-lite","date_published":"2020-09-25T00:00:00.000Z","date_modified":"2024-08-04T13:08:22.000Z","tags":["T1190","T1574"],"_patchfirst":{"reason":"published","priority":15.4,"kev":null,"epss":{"score":0.00917,"percentile":0.60177},"cvss":{"score":4.8,"severity":"MEDIUM","version":"3.1"},"vendor":"tensorflow","product":"tensorflow","techniqueIds":["T1190","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-16874","url":"https://patchfirst.co/cve/CVE-2020-16874/","title":"CVE-2020-16874: Visual Studio Remote Code Execution Vulnerability","content_text":"Microsoft · Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6). Not in CISA KEV. EPSS 4.3% (higher than 91.1% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.002 Malicious File; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; T1485 Data Destruction; +1 more. Priority 24.4 of 100.","summary":"Visual Studio Remote Code Execution Vulnerability","date_published":"2020-09-11T00:00:00.000Z","date_modified":"2024-08-04T13:45:34.000Z","tags":["T1204.002","T1499.004","T1574","T1005","T1136","T1485","T1565"],"_patchfirst":{"reason":"published","priority":24.4,"kev":null,"epss":{"score":0.04285,"percentile":0.91102},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)","techniqueIds":["T1204.002","T1499.004","T1574","T1005","T1136","T1485","T1565"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-1569","url":"https://patchfirst.co/cve/CVE-2020-1569/","title":"CVE-2020-1569: Microsoft Edge Memory Corruption Vulnerability","content_text":"Microsoft · Microsoft Edge (EdgeHTML-based). Not in CISA KEV. EPSS 3.0% (higher than 87.3% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 23.6 of 100.","summary":"Microsoft Edge Memory Corruption Vulnerability","date_published":"2020-08-17T00:00:00.000Z","date_modified":"2024-08-04T06:39:10.000Z","tags":["T1204.002","T1566","T1499.004","T1574","T1005","T1136","T1485","T1565"],"_patchfirst":{"reason":"published","priority":23.6,"kev":null,"epss":{"score":0.02984,"percentile":0.87281},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Microsoft Edge (EdgeHTML-based)","techniqueIds":["T1204.002","T1566","T1499.004","T1574","T1005","T1136","T1485","T1565"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-1495","url":"https://patchfirst.co/cve/CVE-2020-1495/","title":"CVE-2020-1495: Microsoft Excel Remote Code Execution Vulnerability","content_text":"Microsoft · Microsoft SharePoint Server 2010 Service Pack 2. Not in CISA KEV. EPSS 4.2% (higher than 91% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 18.9 of 100.","summary":"Microsoft Excel Remote Code Execution Vulnerability","date_published":"2020-08-17T00:00:00.000Z","date_modified":"2024-08-04T06:39:10.000Z","tags":["T1204.002","T1566","T1499.004","T1574","T1005","T1136","T1485","T1565"],"_patchfirst":{"reason":"published","priority":18.9,"kev":null,"epss":{"score":0.04212,"percentile":0.90969},"cvss":null,"vendor":"Microsoft","product":"Microsoft SharePoint Server 2010 Service Pack 2","techniqueIds":["T1204.002","T1566","T1499.004","T1574","T1005","T1136","T1485","T1565"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-1425","url":"https://patchfirst.co/cve/CVE-2020-1425/","title":"CVE-2020-1425: A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in…","content_text":"Microsoft · Windows 10 Version 2004 for x64-based Systems. Not in CISA KEV. EPSS 9.3% (higher than 95.4% of CVEs). ATT&CK: T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 19.8 of 100.","summary":"A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in…","date_published":"2020-07-27T00:00:00.000Z","date_modified":"2024-08-04T06:39:10.000Z","tags":["T1499.004","T1574"],"_patchfirst":{"reason":"published","priority":19.8,"kev":null,"epss":{"score":0.09274,"percentile":0.95355},"cvss":null,"vendor":"Microsoft","product":"Windows 10 Version 2004 for x64-based Systems","techniqueIds":["T1499.004","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-15100","url":"https://patchfirst.co/cve/CVE-2020-15100/","title":"CVE-2020-15100: Uncontrolled Resource Consumption in freewvs","content_text":"schokokeksorg · freewvs. Not in CISA KEV. EPSS 0.3% (higher than 27.1% of CVEs). CVSS 2.8 LOW. ATT&CK: T1078 Valid Accounts; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 7.4 of 100.","summary":"Uncontrolled Resource Consumption in freewvs","date_published":"2020-07-14T00:00:00.000Z","date_modified":"2024-08-04T13:08:21.000Z","tags":["T1078","T1499.004","T1574"],"_patchfirst":{"reason":"published","priority":7.4,"kev":null,"epss":{"score":0.00337,"percentile":0.27096},"cvss":{"score":2.8,"severity":"LOW","version":"3.1"},"vendor":"schokokeksorg","product":"freewvs","techniqueIds":["T1078","T1499.004","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-11068","url":"https://patchfirst.co/cve/CVE-2020-11068/","title":"CVE-2020-11068: Potential Buffer Overflow in LoRaMac-node","content_text":"LoRa · LoRaMac-node. Not in CISA KEV. EPSS 0.9% (higher than 60.2% of CVEs). CVSS 5.0 MEDIUM. ATT&CK: T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 15.5 of 100.","summary":"Potential Buffer Overflow in LoRaMac-node","date_published":"2020-06-23T00:00:00.000Z","date_modified":"2024-08-04T11:21:14.000Z","tags":["T1499.004","T1574"],"_patchfirst":{"reason":"published","priority":15.5,"kev":null,"epss":{"score":0.00919,"percentile":0.60213},"cvss":{"score":5,"severity":"MEDIUM","version":"3.1"},"vendor":"LoRa","product":"LoRaMac-node","techniqueIds":["T1499.004","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-4068","url":"https://patchfirst.co/cve/CVE-2020-4068/","title":"CVE-2020-4068: Heap-based Buffer Overflow in APNSwift","content_text":"kylebrowning · APNSwift. Not in CISA KEV. EPSS 1.3% (higher than 70.7% of CVEs). CVSS 6.3 MEDIUM. ATT&CK: T1091 Replication Through Removable Media; T1133 External Remote Services; T1190 Exploit Public-Facing Application; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 18.6 of 100.","summary":"Heap-based Buffer Overflow in APNSwift","date_published":"2020-06-22T00:00:00.000Z","date_modified":"2024-08-04T07:52:20.000Z","tags":["T1091","T1133","T1190","T1566","T1499.004","T1574"],"_patchfirst":{"reason":"published","priority":18.6,"kev":null,"epss":{"score":0.01316,"percentile":0.70744},"cvss":{"score":6.3,"severity":"MEDIUM","version":"3.1"},"vendor":"kylebrowning","product":"APNSwift","techniqueIds":["T1091","T1133","T1190","T1566","T1499.004","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-3198","url":"https://patchfirst.co/cve/CVE-2020-3198/","title":"CVE-2020-3198: Cisco IOS Software for Cisco Industrial Routers Arbitrary Code Execution Vulnerabilities","content_text":"Cisco · Cisco IOS 12.2(60)EZ16. Not in CISA KEV. EPSS 4.6% (higher than 91.6% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1133 External Remote Services; T1190 Exploit Public-Facing Application; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 25.2 of 100.","summary":"Cisco IOS Software for Cisco Industrial Routers Arbitrary Code Execution Vulnerabilities","date_published":"2020-06-03T00:00:00.000Z","date_modified":"2024-11-15T17:13:29.000Z","tags":["T1133","T1190","T1566","T1499.004","T1574"],"_patchfirst":{"reason":"published","priority":25.2,"kev":null,"epss":{"score":0.04583,"percentile":0.91625},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.0"},"vendor":"Cisco","product":"Cisco IOS 12.2(60)EZ16","techniqueIds":["T1133","T1190","T1566","T1499.004","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-11039","url":"https://patchfirst.co/cve/CVE-2020-11039/","title":"CVE-2020-11039: Integer Overflow in FreeRDP","content_text":"FreeRDP · FreeRDP. Not in CISA KEV. EPSS 1.1% (higher than 66.4% of CVEs). CVSS 8.0 HIGH. ATT&CK: T1005 Data from Local System; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 18.9 of 100.","summary":"Integer Overflow in FreeRDP","date_published":"2020-05-29T00:00:00.000Z","date_modified":"2024-08-04T11:21:14.000Z","tags":["T1005","T1499.004","T1574"],"_patchfirst":{"reason":"published","priority":18.9,"kev":null,"epss":{"score":0.0113,"percentile":0.66362},"cvss":{"score":8,"severity":"HIGH","version":"3.1"},"vendor":"FreeRDP","product":"FreeRDP","techniqueIds":["T1005","T1499.004","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-1109","url":"https://patchfirst.co/cve/CVE-2020-1109/","title":"CVE-2020-1109: Windows Update Stack Elevation of Privilege Vulnerability","content_text":"Microsoft · Windows 10 Version 1709. Not in CISA KEV. EPSS 1.0% (higher than 62.6% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; T1485 Data Destruction; T1565 Data Manipulation. Priority 18.0 of 100.","summary":"Windows Update Stack Elevation of Privilege Vulnerability","date_published":"2020-05-21T00:00:00.000Z","date_modified":"2026-08-19T16:34:05.000Z","tags":["T1499.004","T1574","T1005","T1136","T1485","T1565"],"_patchfirst":{"reason":"published","priority":18,"kev":null,"epss":{"score":0.00994,"percentile":0.6259},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1709","techniqueIds":["T1499.004","T1574","T1005","T1136","T1485","T1565"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-3309","url":"https://patchfirst.co/cve/CVE-2020-3309/","title":"CVE-2020-3309: Cisco Firepower Device Manager On-Box Software Arbitrary File Overwrite Vulnerability","content_text":"Cisco · Cisco Firepower Threat Defense Software. Not in CISA KEV. EPSS 1.8% (higher than 78% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1133 External Remote Services; T1190 Exploit Public-Facing Application; T1574 Hijack Execution Flow; T1565.001 Stored Data Manipulation. Priority 20.2 of 100.","summary":"Cisco Firepower Device Manager On-Box Software Arbitrary File Overwrite Vulnerability","date_published":"2020-05-06T00:00:00.000Z","date_modified":"2024-11-15T17:27:25.000Z","tags":["T1133","T1190","T1574","T1565.001"],"_patchfirst":{"reason":"published","priority":20.2,"kev":null,"epss":{"score":0.01766,"percentile":0.78045},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Firepower Threat Defense Software","techniqueIds":["T1133","T1190","T1574","T1565.001"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-0898","url":"https://patchfirst.co/cve/CVE-2020-0898/","title":"CVE-2020-0898: An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in…","content_text":"Microsoft · Windows. Not in CISA KEV. EPSS 0.9% (higher than 59% of CVEs). ATT&CK: T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 11.8 of 100.","summary":"An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in…","date_published":"2020-03-12T00:00:00.000Z","date_modified":"2024-08-04T06:18:03.000Z","tags":["T1499.004","T1574"],"_patchfirst":{"reason":"published","priority":11.8,"kev":null,"epss":{"score":0.00876,"percentile":0.58965},"cvss":null,"vendor":"Microsoft","product":"Windows","techniqueIds":["T1499.004","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5254","url":"https://patchfirst.co/cve/CVE-2020-5254/","title":"CVE-2020-5254: NetHack hilite_status parsing privilege escalation","content_text":"NetHack · NetHack. Not in CISA KEV. EPSS 1.1% (higher than 66.4% of CVEs). CVSS 3.9 LOW. Public exploit code exists. ATT&CK: T1574 Hijack Execution Flow. Priority 21.0 of 100.","summary":"NetHack hilite_status parsing privilege escalation","date_published":"2020-03-10T00:00:00.000Z","date_modified":"2024-08-04T08:22:09.000Z","tags":["public-exploit","T1574"],"_patchfirst":{"reason":"published","priority":21,"kev":null,"epss":{"score":0.01132,"percentile":0.66416},"cvss":{"score":3.9,"severity":"LOW","version":"3.1"},"vendor":"NetHack","product":"NetHack","techniqueIds":["T1574"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2020-5253","url":"https://patchfirst.co/cve/CVE-2020-5253/","title":"CVE-2020-5253: Privilege escalation in NetHack","content_text":"NetHack · NetHack. Not in CISA KEV. EPSS 0.5% (higher than 45.6% of CVEs). CVSS 3.9 LOW. ATT&CK: T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 11.8 of 100.","summary":"Privilege escalation in NetHack","date_published":"2020-03-10T00:00:00.000Z","date_modified":"2024-08-04T08:22:09.000Z","tags":["T1499.004","T1574"],"_patchfirst":{"reason":"published","priority":11.8,"kev":null,"epss":{"score":0.00543,"percentile":0.45576},"cvss":{"score":3.9,"severity":"LOW","version":"3.1"},"vendor":"NetHack","product":"NetHack","techniqueIds":["T1499.004","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-0671","url":"https://patchfirst.co/cve/CVE-2020-0671/","title":"CVE-2020-0671: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka…","content_text":"Microsoft · Windows. Not in CISA KEV. EPSS 1.4% (higher than 71.8% of CVEs). ATT&CK: T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; T1485 Data Destruction; T1565 Data Manipulation. Priority 15.0 of 100.","summary":"An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka…","date_published":"2020-02-11T00:00:00.000Z","date_modified":"2024-08-04T06:11:04.000Z","tags":["T1499.004","T1574","T1005","T1136","T1485","T1565"],"_patchfirst":{"reason":"published","priority":15,"kev":null,"epss":{"score":0.01367,"percentile":0.7182},"cvss":null,"vendor":"Microsoft","product":"Windows","techniqueIds":["T1499.004","T1574","T1005","T1136","T1485","T1565"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5210","url":"https://patchfirst.co/cve/CVE-2020-5210/","title":"CVE-2020-5210: NetHack command line -w option parsing is subject to a buffer overflow","content_text":"NetHack · NetHack. Not in CISA KEV. EPSS 0.8% (higher than 56.6% of CVEs). CVSS 5.0 MEDIUM. ATT&CK: T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 14.8 of 100.","summary":"NetHack command line -w option parsing is subject to a buffer overflow","date_published":"2020-01-28T00:00:00.000Z","date_modified":"2024-08-04T08:22:08.000Z","tags":["T1499.004","T1574"],"_patchfirst":{"reason":"published","priority":14.8,"kev":null,"epss":{"score":0.00802,"percentile":0.56623},"cvss":{"score":5,"severity":"MEDIUM","version":"3.1"},"vendor":"NetHack","product":"NetHack","techniqueIds":["T1499.004","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-12660","url":"https://patchfirst.co/cve/CVE-2019-12660/","title":"CVE-2019-12660: Cisco IOS XE Software ASIC Register Write Vulnerability","content_text":"Cisco · Cisco IOS XE Software 3.2.11aSG. Not in CISA KEV. EPSS 0.3% (higher than 23% of CVEs). CVSS 5.5 MEDIUM. ATT&CK: T1078 Valid Accounts; T1574 Hijack Execution Flow. Priority 8.4 of 100.","summary":"Cisco IOS XE Software ASIC Register Write Vulnerability","date_published":"2019-09-25T00:00:00.000Z","date_modified":"2024-11-21T19:13:29.000Z","tags":["T1078","T1574"],"_patchfirst":{"reason":"published","priority":8.4,"kev":null,"epss":{"score":0.00302,"percentile":0.22955},"cvss":{"score":5.5,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco IOS XE Software 3.2.11aSG","techniqueIds":["T1078","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-13522","url":"https://patchfirst.co/cve/CVE-2019-13522/","title":"CVE-2019-13522: An attacker could use a specially crafted project file to corrupt the memory and execute code under the privileges of…","content_text":"Not in CISA KEV. EPSS 1.4% (higher than 71.8% of CVEs). ATT&CK: T1204.002 Malicious File; T1574 Hijack Execution Flow. Priority 14.4 of 100.","summary":"An attacker could use a specially crafted project file to corrupt the memory and execute code under the privileges of…","date_published":"2019-09-04T00:00:00.000Z","date_modified":"2024-08-04T23:57:39.000Z","tags":["T1204.002","T1574"],"_patchfirst":{"reason":"published","priority":14.4,"kev":null,"epss":{"score":0.01367,"percentile":0.71829},"cvss":null,"vendor":null,"product":null,"techniqueIds":["T1204.002","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-10980","url":"https://patchfirst.co/cve/CVE-2019-10980/","title":"CVE-2019-10980: A type confusion vulnerability may be exploited when LAquis SCADA 4.3.1.71 processes a specially crafted project file","content_text":"Not in CISA KEV. EPSS 1.0% (higher than 62.9% of CVEs). ATT&CK: T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 12.6 of 100.","summary":"A type confusion vulnerability may be exploited when LAquis SCADA 4.3.1.71 processes a specially crafted project file","date_published":"2019-08-05T00:00:00.000Z","date_modified":"2024-08-04T22:40:15.000Z","tags":["T1499.004","T1574"],"_patchfirst":{"reason":"published","priority":12.6,"kev":null,"epss":{"score":0.01002,"percentile":0.62855},"cvss":null,"vendor":null,"product":null,"techniqueIds":["T1499.004","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-1118","url":"https://patchfirst.co/cve/CVE-2019-1118/","title":"CVE-2019-1118: A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite…","content_text":"Microsoft · Windows. Not in CISA KEV. EPSS 23.6% (higher than 97.8% of CVEs). Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1204.002 Malicious File; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 24.6 of 100.","summary":"A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite…","date_published":"2019-07-29T00:00:00.000Z","date_modified":"2024-08-04T18:06:31.000Z","tags":["public-exploit","T1189","T1204.002","T1499.004","T1574","T1005","T1136","T1485","T1565"],"_patchfirst":{"reason":"published","priority":24.6,"kev":null,"epss":{"score":0.2357,"percentile":0.97801},"cvss":null,"vendor":"Microsoft","product":"Windows","techniqueIds":["T1189","T1204.002","T1499.004","T1574","T1005","T1136","T1485","T1565"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2019-1106","url":"https://patchfirst.co/cve/CVE-2019-1106/","title":"CVE-2019-1106: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in…","content_text":"Microsoft · Microsoft Edge. Not in CISA KEV. EPSS 9.2% (higher than 95.3% of CVEs). ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 19.1 of 100.","summary":"A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in…","date_published":"2019-07-29T00:00:00.000Z","date_modified":"2024-08-04T18:06:31.000Z","tags":["T1189","T1203","T1499.004","T1574"],"_patchfirst":{"reason":"published","priority":19.1,"kev":null,"epss":{"score":0.09205,"percentile":0.95331},"cvss":null,"vendor":"Microsoft","product":"Microsoft Edge","techniqueIds":["T1189","T1203","T1499.004","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-1052","url":"https://patchfirst.co/cve/CVE-2019-1052/","title":"CVE-2019-1052: Chakra Scripting Engine Memory Corruption Vulnerability","content_text":"Microsoft · Microsoft Edge (EdgeHTML-based). Not in CISA KEV. EPSS 2.4% (higher than 84% of CVEs). CVSS 4.2 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 19.7 of 100.","summary":"Chakra Scripting Engine Memory Corruption Vulnerability","date_published":"2019-06-12T00:00:00.000Z","date_modified":"2025-05-20T17:50:19.000Z","tags":["T1189","T1203","T1499.004","T1574"],"_patchfirst":{"reason":"published","priority":19.7,"kev":null,"epss":{"score":0.02403,"percentile":0.84034},"cvss":{"score":4.2,"severity":"MEDIUM","version":"3.1"},"vendor":"Microsoft","product":"Microsoft Edge (EdgeHTML-based)","techniqueIds":["T1189","T1203","T1499.004","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-1035","url":"https://patchfirst.co/cve/CVE-2019-1035/","title":"CVE-2019-1035: Microsoft Word Remote Code Execution Vulnerability","content_text":"Microsoft · Microsoft SharePoint Server 2019. Not in CISA KEV. EPSS 6.6% (higher than 93.8% of CVEs). ATT&CK: T1203 Exploitation for Client Execution; T1204.002 Malicious File; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 19.4 of 100.","summary":"Microsoft Word Remote Code Execution Vulnerability","date_published":"2019-06-12T00:00:00.000Z","date_modified":"2025-05-20T17:50:14.000Z","tags":["T1203","T1204.002","T1499.004","T1574"],"_patchfirst":{"reason":"published","priority":19.4,"kev":null,"epss":{"score":0.06558,"percentile":0.93805},"cvss":null,"vendor":"Microsoft","product":"Microsoft SharePoint Server 2019","techniqueIds":["T1203","T1204.002","T1499.004","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-3723","url":"https://patchfirst.co/cve/CVE-2019-3723/","title":"CVE-2019-3723: Web Parameter Tampering Vulnerability","content_text":"Dell EMC · OpenManage Server Administrator. Not in CISA KEV. EPSS 1.8% (higher than 79.1% of CVEs). CVSS 9.1 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1485 Data Destruction; T1059 Command and Scripting Interpreter; T1574 Hijack Execution Flow. Priority 22.2 of 100.","summary":"Web Parameter Tampering Vulnerability","date_published":"2019-06-06T00:00:00.000Z","date_modified":"2024-09-16T19:05:23.000Z","tags":["T1190","T1485","T1059","T1574"],"_patchfirst":{"reason":"published","priority":22.2,"kev":null,"epss":{"score":0.01848,"percentile":0.79053},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.0"},"vendor":"Dell EMC","product":"OpenManage Server Administrator","techniqueIds":["T1190","T1485","T1059","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-0911","url":"https://patchfirst.co/cve/CVE-2019-0911/","title":"CVE-2019-0911: A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft…","content_text":"Microsoft · Internet Explorer 11. Not in CISA KEV. EPSS 9.1% (higher than 95.3% of CVEs). ATT&CK: T1189 Drive-by Compromise; T1204.002 Malicious File; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 19.1 of 100.","summary":"A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft…","date_published":"2019-05-16T00:00:00.000Z","date_modified":"2024-08-04T17:58:59.000Z","tags":["T1189","T1204.002","T1499.004","T1574"],"_patchfirst":{"reason":"published","priority":19.1,"kev":null,"epss":{"score":0.09089,"percentile":0.95292},"cvss":null,"vendor":"Microsoft","product":"Internet Explorer 11","techniqueIds":["T1189","T1204.002","T1499.004","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-0926","url":"https://patchfirst.co/cve/CVE-2019-0926/","title":"CVE-2019-0926: A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft…","content_text":"Microsoft · Microsoft Edge. Not in CISA KEV. EPSS 8.1% (higher than 94.8% of CVEs). ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 19.0 of 100.","summary":"A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft…","date_published":"2019-05-16T00:00:00.000Z","date_modified":"2024-08-04T17:58:59.000Z","tags":["T1189","T1203","T1499.004","T1574"],"_patchfirst":{"reason":"published","priority":19,"kev":null,"epss":{"score":0.08096,"percentile":0.9481},"cvss":null,"vendor":"Microsoft","product":"Microsoft Edge","techniqueIds":["T1189","T1203","T1499.004","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-0609","url":"https://patchfirst.co/cve/CVE-2019-0609/","title":"CVE-2019-0609: A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft…","content_text":"Microsoft · Internet Explorer 11. Not in CISA KEV. EPSS 9.8% (higher than 95.6% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 19.8 of 100.","summary":"A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft…","date_published":"2019-04-08T00:00:00.000Z","date_modified":"2024-08-04T17:51:26.000Z","tags":["T1204.002","T1566","T1499.004","T1574","T1005","T1136","T1485","T1565"],"_patchfirst":{"reason":"published","priority":19.8,"kev":null,"epss":{"score":0.09846,"percentile":0.95554},"cvss":null,"vendor":"Microsoft","product":"Internet Explorer 11","techniqueIds":["T1204.002","T1566","T1499.004","T1574","T1005","T1136","T1485","T1565"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-6538","url":"https://patchfirst.co/cve/CVE-2019-6538/","title":"CVE-2019-6538: Medtronic Conexus Radio Frequency Telemetry Protocol Improper Access Control","content_text":"Medtronic · Conexus Radio Frequency Telemetry Protocol. Not in CISA KEV. EPSS 0.9% (higher than 59.5% of CVEs). CVSS 9.3 CRITICAL. ATT&CK: T1005 Data from Local System; T1499.004 Application or System Exploitation; T1557 Adversary-in-the-Middle; T1574 Hijack Execution Flow. Priority 19.8 of 100.","summary":"Medtronic Conexus Radio Frequency Telemetry Protocol Improper Access Control","date_published":"2019-03-25T00:00:00.000Z","date_modified":"2025-05-22T19:26:15.000Z","tags":["T1005","T1499.004","T1557","T1574"],"_patchfirst":{"reason":"published","priority":19.8,"kev":null,"epss":{"score":0.00895,"percentile":0.59505},"cvss":{"score":9.3,"severity":"CRITICAL","version":"3.1"},"vendor":"Medtronic","product":"Conexus Radio Frequency Telemetry Protocol","techniqueIds":["T1005","T1499.004","T1557","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-0576","url":"https://patchfirst.co/cve/CVE-2019-0576/","title":"CVE-2019-0576: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in…","content_text":"Microsoft · Windows 7. Not in CISA KEV. EPSS 17.0% (higher than 97.1% of CVEs). ATT&CK: T1204.002 Malicious File; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 19.4 of 100.","summary":"A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in…","date_published":"2019-01-08T00:00:00.000Z","date_modified":"2024-08-04T17:51:26.000Z","tags":["T1204.002","T1499.004","T1574"],"_patchfirst":{"reason":"published","priority":19.4,"kev":null,"epss":{"score":0.17024,"percentile":0.97071},"cvss":null,"vendor":"Microsoft","product":"Windows 7","techniqueIds":["T1204.002","T1499.004","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-18987","url":"https://patchfirst.co/cve/CVE-2018-18987/","title":"CVE-2018-18987: VT-Designer Version 2.1.7.31 is vulnerable by the program populating objects with user supplied input via a file…","content_text":"Not in CISA KEV. EPSS 3.2% (higher than 88.1% of CVEs). ATT&CK: T1059 Command and Scripting Interpreter; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 17.6 of 100.","summary":"VT-Designer Version 2.1.7.31 is vulnerable by the program populating objects with user supplied input via a file…","date_published":"2018-11-30T00:00:00.000Z","date_modified":"2024-08-05T11:23:08.000Z","tags":["T1059","T1499.004","T1574"],"_patchfirst":{"reason":"published","priority":17.6,"kev":null,"epss":{"score":0.03199,"percentile":0.88113},"cvss":null,"vendor":null,"product":null,"techniqueIds":["T1059","T1499.004","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}