<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Patchfirst: ImageMagick vulnerabilities</title><link>https://patchfirst.co/vendor/imagemagick/</link><atom:link href="https://patchfirst.co/feed/vendor/imagemagick.xml" rel="self" type="application/rss+xml"/><description>New and newly exploited ImageMagick CVEs, with CISA KEV, EPSS and ATT&amp;CK context. Newest 50 by publication or KEV listing.</description><language>en-gb</language><ttl>360</ttl><lastBuildDate>Sat, 31 Oct 2026 13:00:36 GMT</lastBuildDate><item><title>[KEV] CVE-2016-3714: ImageMagick Improper Input Validation Vulnerability</title><link>https://patchfirst.co/cve/CVE-2016-3714/</link><guid isPermaLink="false">CVE-2016-3714#kev</guid><pubDate>Mon, 09 Sep 2024 00:00:00 GMT</pubDate><description>ImageMagick · ImageMagick. In CISA KEV since 2024-09-09. ENISA EUVD lists it as exploited. EPSS 97.5% (higher than 99.9% of CVEs). CVSS 8.4 HIGH. Public exploit code exists. ATT&amp;CK: T1204.002 Malicious File; T1059 Command and Scripting Interpreter. Priority 68.9 of 100.</description><category>kev</category><category>public-exploit</category><category>T1204.002</category><category>T1059</category></item><item><title>[KEV] CVE-2016-3718: ImageMagick Server-Side Request Forgery (SSRF) Vulnerability</title><link>https://patchfirst.co/cve/CVE-2016-3718/</link><guid isPermaLink="false">CVE-2016-3718#kev</guid><pubDate>Wed, 03 Nov 2021 00:00:00 GMT</pubDate><description>ImageMagick · ImageMagick. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 75.6% (higher than 99.52% of CVEs). CVSS 5.5 MEDIUM. Public exploit code exists. ATT&amp;CK: T1090 Proxy. Priority 66.8 of 100.</description><category>kev</category><category>public-exploit</category><category>T1090</category></item><item><title>[KEV] CVE-2016-3715: ImageMagick Arbitrary File Deletion Vulnerability</title><link>https://patchfirst.co/cve/CVE-2016-3715/</link><guid isPermaLink="false">CVE-2016-3715#kev</guid><pubDate>Wed, 03 Nov 2021 00:00:00 GMT</pubDate><description>ImageMagick · ImageMagick. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 75.3% (higher than 99.51% of CVEs). CVSS 5.5 MEDIUM. Public exploit code exists. ATT&amp;CK: T1204.002 Malicious File; T1485 Data Destruction. Priority 66.8 of 100.</description><category>kev</category><category>public-exploit</category><category>T1204.002</category><category>T1485</category></item></channel></rss>