https://patchfirst.co/technique/T1027/New and newly exploited CVEs that lead to ATT&CK T1027 Obfuscated Files or Information, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2010-2883/CVE-2010-2883#kevWed, 08 Jun 2022 00:00:00 GMTAdobe · Acrobat and Reader. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 81.4% (higher than 99.64% of CVEs). CVSS 7.3 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1027 Obfuscated Files or Information; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 56.9 of 100.kevpublic-exploitT1204.002T1027T1059https://patchfirst.co/cve/CVE-2022-24086/CVE-2022-24086Wed, 16 Feb 2022 00:00:00 GMTAdobe · Commerce and Magento Open Source. In CISA KEV since 2022-02-15. ENISA EUVD lists it as exploited. EPSS 99.2% (higher than 99.93% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1027 Obfuscated Files or Information; T1213 Data from Information Repositories. Priority 69.8 of 100.kevpublic-exploitT1190T1027T1213https://patchfirst.co/cve/CVE-2021-44077/CVE-2021-44077#kevWed, 01 Dec 2021 00:00:00 GMTZoho · ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus. In CISA KEV since 2021-12-01. ENISA EUVD lists it as exploited. EPSS 93.3% (higher than 99.84% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1505.003 Web Shell; T1003 OS Credential Dumping; T1003.003 NTDS; T1027 Obfuscated Files or Information; T1047 Windows Management Instrumentation; +7 more. Priority 69.8 of 100.kevpublic-exploitT1190T1505.003T1003T1003.003T1027T1047T1070.004T1087.002T1136T1140T1218T1560.001T1573.001https://patchfirst.co/cve/CVE-2021-40449/CVE-2021-40449#kevWed, 17 Nov 2021 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2021-11-17, known ransomware use. ENISA EUVD lists it as exploited. EPSS 81.9% (higher than 99.65% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1566 Phishing; T1068 Exploitation for Privilege Escalation; T1016 System Network Configuration Discovery; T1027 Obfuscated Files or Information; T1059.003 Windows Command Shell; T1071.001 Web Protocols; +2 more. Priority 78.4 of 100.kevransomwarepublic-exploitT1566T1068T1016T1027T1059.003T1071.001T1082T1573.001https://patchfirst.co/cve/CVE-2021-40539/CVE-2021-40539#kevWed, 03 Nov 2021 00:00:00 GMTZoho · ManageEngine. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.0% (higher than 99.93% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1505.003 Web Shell; T1003 OS Credential Dumping; T1003.003 NTDS; T1027 Obfuscated Files or Information; T1047 Windows Management Instrumentation; +7 more. Named in 1 threat report. Priority 83.7 of 100.kevransomwarepublic-exploitT1190T1505.003T1003T1003.003T1027T1047T1070.004T1087.002T1136T1140T1218T1560.001T1573.001