https://patchfirst.co/technique/T1055/New and newly exploited CVEs that lead to ATT&CK T1055 Process Injection, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-85880/CVE-2026-85880#kevTue, 08 Sep 2026 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2026-09-08. ENISA EUVD lists it as exploited. EPSS 0.4% (higher than 32.8% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1055 Process Injection. Priority 60.0 of 100.kevT1068T1055https://patchfirst.co/cve/CVE-2025-25257/CVE-2025-25257#kevFri, 18 Jul 2025 00:00:00 GMTFortinet · FortiWeb. In CISA KEV since 2025-07-18. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1055 Process Injection; T1068 Exploitation for Privilege Escalation; T1190 Exploit Public-Facing Application; T1059.004 Unix Shell; T1485 Data Destruction. Priority 69.9 of 100.kevpublic-exploitT1055T1068T1190T1059.004T1485https://patchfirst.co/cve/CVE-2025-21480/CVE-2025-21480#kevTue, 03 Jun 2025 00:00:00 GMTQualcomm · Multiple Chipsets. In CISA KEV since 2025-06-03. ENISA EUVD lists it as exploited. EPSS 0.4% (higher than 37.1% of CVEs). CVSS 8.6 HIGH. ATT&CK: T1055 Process Injection; T1495 Firmware Corruption. Priority 51.4 of 100.kevT1055T1495https://patchfirst.co/cve/CVE-2024-56145/CVE-2024-56145#kevMon, 02 Jun 2025 00:00:00 GMTCraft CMS · Craft CMS. In CISA KEV since 2025-06-02. ENISA EUVD lists it as exploited. EPSS 97.4% (higher than 99.9% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1055 Process Injection; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.kevpublic-exploitT1055T1059https://patchfirst.co/cve/CVE-2024-6047/CVE-2024-6047#kevWed, 07 May 2025 00:00:00 GMTGeoVision · Multiple Devices. In CISA KEV since 2025-05-07. ENISA EUVD lists it as exploited. EPSS 10.1% (higher than 95.6% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1055 Process Injection; T1059 Command and Scripting Interpreter. Priority 69.0 of 100.kevpublic-exploitT1055T1059https://patchfirst.co/cve/CVE-2024-58136/CVE-2024-58136#kevFri, 02 May 2025 00:00:00 GMTYiiframework · Yii. In CISA KEV since 2025-05-02. ENISA EUVD lists it as exploited. EPSS 87.8% (higher than 99.76% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1055 Process Injection; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.kevpublic-exploitT1055T1059https://patchfirst.co/cve/CVE-2025-31324/CVE-2025-31324#kevTue, 29 Apr 2025 00:00:00 GMTSAP · NetWeaver. In CISA KEV since 2025-04-29, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.5% (higher than 99.94% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1055 Process Injection; T1505.003 Web Shell; T1059 Command and Scripting Interpreter; T1602 Data from Configuration Repository. Named in 1 threat report. Priority 83.7 of 100.kevransomwarepublic-exploitT1055T1505.003T1059T1602https://patchfirst.co/cve/CVE-2025-1316/CVE-2025-1316#kevWed, 19 Mar 2025 00:00:00 GMTEdimax · IC-7100 IP Camera. In CISA KEV since 2025-03-19. ENISA EUVD lists it as exploited. EPSS 74.5% (higher than 99.49% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1055 Process Injection. Priority 64.8 of 100.kevT1190T1055https://patchfirst.co/cve/CVE-2025-24993/CVE-2025-24993#kevTue, 11 Mar 2025 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2025-03-11. ENISA EUVD lists it as exploited. EPSS 2.2% (higher than 82.6% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1203 Exploitation for Client Execution; T1204 User Execution; T1055 Process Injection; T1565 Data Manipulation. Priority 60.0 of 100.kevT1068T1203T1204T1055T1565https://patchfirst.co/cve/CVE-2025-25181/CVE-2025-25181#kevMon, 10 Mar 2025 00:00:00 GMTAdvantive · VeraCore. In CISA KEV since 2025-03-10. ENISA EUVD lists it as exploited. EPSS 55.5% (higher than 99.04% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1055 Process Injection; T1068 Exploitation for Privilege Escalation; T1485 Data Destruction. Priority 68.1 of 100.kevpublic-exploitT1055T1068T1485https://patchfirst.co/cve/CVE-2025-22224/CVE-2025-22224#kevTue, 04 Mar 2025 00:00:00 GMTVMware · ESXi and Workstation. In CISA KEV since 2025-03-04. ENISA EUVD lists it as exploited. EPSS 1.6% (higher than 75.2% of CVEs). CVSS 8.2 HIGH. ATT&CK: T1055 Process Injection; T1611 Escape to Host. Priority 68.8 of 100.kevT1055T1611https://patchfirst.co/cve/CVE-2023-34192/CVE-2023-34192#kevTue, 25 Feb 2025 00:00:00 GMTSynacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2025-02-25. ENISA EUVD lists it as exploited. EPSS 77.3% (higher than 99.56% of CVEs). CVSS 9.0 CRITICAL. Public exploit code exists. ATT&CK: T1055 Process Injection; T1059 Command and Scripting Interpreter; T1185 Browser Session Hijacking. Priority 69.2 of 100.kevpublic-exploitT1055T1059T1185https://patchfirst.co/cve/CVE-2025-0108/CVE-2025-0108#kevTue, 18 Feb 2025 00:00:00 GMTPalo Alto Networks · PAN-OS. In CISA KEV since 2025-02-18. ENISA EUVD lists it as exploited. EPSS 98.1% (higher than 99.91% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1055 Process Injection; T1565.001 Stored Data Manipulation. Priority 69.4 of 100.kevpublic-exploitT1190T1055T1565.001https://patchfirst.co/cve/CVE-2024-40891/CVE-2024-40891#kevTue, 11 Feb 2025 00:00:00 GMTZyxel · DSL CPE Devices. In CISA KEV since 2025-02-11. ENISA EUVD lists it as exploited. EPSS 22.9% (higher than 97.7% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1055 Process Injection; T1011 Exfiltration Over Other Network Medium. Priority 68.7 of 100.kevpublic-exploitT1055T1011https://patchfirst.co/cve/CVE-2024-40890/CVE-2024-40890#kevTue, 11 Feb 2025 00:00:00 GMTZyxel · DSL CPE Devices. In CISA KEV since 2025-02-11. ENISA EUVD lists it as exploited. EPSS 20.7% (higher than 97.5% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1055 Process Injection; T1011 Exfiltration Over Other Network Medium. Priority 63.7 of 100.kevT1055T1011https://patchfirst.co/cve/CVE-2025-21418/CVE-2025-21418#kevTue, 11 Feb 2025 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2025-02-11. ENISA EUVD lists it as exploited. EPSS 2.1% (higher than 82% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1005 Data from Local System; T1055 Process Injection. Priority 59.9 of 100.kevT1068T1005T1055https://patchfirst.co/cve/CVE-2020-29574/CVE-2020-29574#kevThu, 06 Feb 2025 00:00:00 GMTSophos · CyberoamOS. In CISA KEV since 2025-02-06, known ransomware use. ENISA EUVD lists it as exploited. EPSS 4.7% (higher than 91.8% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1055 Process Injection; T1059 Command and Scripting Interpreter. Priority 73.2 of 100.kevransomwareT1055T1059https://patchfirst.co/cve/CVE-2024-50603/CVE-2024-50603#kevThu, 16 Jan 2025 00:00:00 GMTAviatrix · Controllers. In CISA KEV since 2025-01-16. ENISA EUVD lists it as exploited. EPSS 98.5% (higher than 99.92% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1055 Process Injection; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.kevpublic-exploitT1055T1059https://patchfirst.co/cve/CVE-2025-0282/CVE-2025-0282#kevWed, 08 Jan 2025 00:00:00 GMTIvanti · Connect Secure, Policy Secure, and ZTA Gateways. In CISA KEV since 2025-01-08, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.98% of CVEs). CVSS 9.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1595 Active Scanning; T1003 OS Credential Dumping; T1055 Process Injection; T1018 Remote System Discovery; T1046 Network Service Discovery. Named in 2 threat reports. Priority 85.4 of 100.kevransomwarepublic-exploitT1190T1595T1003T1055T1018T1046https://patchfirst.co/cve/CVE-2017-1000253/CVE-2017-1000253#kevMon, 09 Sep 2024 00:00:00 GMTLinux · Kernel. In CISA KEV since 2024-09-09, known ransomware use. ENISA EUVD lists it as exploited. EPSS 10.7% (higher than 95.8% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1055 Process Injection. Priority 77.6 of 100.kevransomwarepublic-exploitT1055https://patchfirst.co/cve/CVE-2023-6548/CVE-2023-6548#kevWed, 17 Jan 2024 00:00:00 GMTCitrix · NetScaler ADC and NetScaler Gateway. In CISA KEV since 2024-01-17. ENISA EUVD lists it as exploited. EPSS 3.2% (higher than 88.1% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1055 Process Injection. Priority 61.8 of 100.kevT1055