{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: ImageMagick vulnerabilities","home_page_url":"https://patchfirst.co/vendor/imagemagick/","feed_url":"https://patchfirst.co/feed/vendor/imagemagick.json","description":"New and newly exploited ImageMagick CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2016-3714#kev","url":"https://patchfirst.co/cve/CVE-2016-3714/","title":"[KEV] CVE-2016-3714: ImageMagick Improper Input Validation Vulnerability","content_text":"ImageMagick · ImageMagick. In CISA KEV since 2024-09-09. ENISA EUVD lists it as exploited. EPSS 97.5% (higher than 99.9% of CVEs). CVSS 8.4 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1059 Command and Scripting Interpreter. Priority 68.9 of 100.","summary":"ImageMagick Improper Input Validation Vulnerability","date_published":"2024-09-09T00:00:00.000Z","date_modified":"2026-06-17T00:46:14.000Z","tags":["kev","public-exploit","T1204.002","T1059"],"_patchfirst":{"reason":"kev","priority":68.9,"kev":{"dateAdded":"2024-09-09","ransomware":false},"epss":{"score":0.97485,"percentile":0.999},"cvss":{"score":8.4,"severity":"HIGH","version":"3.1"},"vendor":"ImageMagick","product":"ImageMagick","techniqueIds":["T1204.002","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2016-3718#kev","url":"https://patchfirst.co/cve/CVE-2016-3718/","title":"[KEV] CVE-2016-3718: ImageMagick Server-Side Request Forgery (SSRF) Vulnerability","content_text":"ImageMagick · ImageMagick. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 75.6% (higher than 99.52% of CVEs). CVSS 5.5 MEDIUM. Public exploit code exists. ATT&CK: T1090 Proxy. Priority 66.8 of 100.","summary":"ImageMagick Server-Side Request Forgery (SSRF) Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T00:46:15.000Z","tags":["kev","public-exploit","T1090"],"_patchfirst":{"reason":"kev","priority":66.8,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.7565,"percentile":0.9952},"cvss":{"score":5.5,"severity":"MEDIUM","version":"3.1"},"vendor":"ImageMagick","product":"ImageMagick","techniqueIds":["T1090"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2016-3715#kev","url":"https://patchfirst.co/cve/CVE-2016-3715/","title":"[KEV] CVE-2016-3715: ImageMagick Arbitrary File Deletion Vulnerability","content_text":"ImageMagick · ImageMagick. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 75.3% (higher than 99.51% of CVEs). CVSS 5.5 MEDIUM. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1485 Data Destruction. Priority 66.8 of 100.","summary":"ImageMagick Arbitrary File Deletion Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T00:46:14.000Z","tags":["kev","public-exploit","T1204.002","T1485"],"_patchfirst":{"reason":"kev","priority":66.8,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.75307,"percentile":0.99512},"cvss":{"score":5.5,"severity":"MEDIUM","version":"3.1"},"vendor":"ImageMagick","product":"ImageMagick","techniqueIds":["T1204.002","T1485"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}}]}