{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: CVEs linked to T1211 Exploitation for Stealth","home_page_url":"https://patchfirst.co/technique/T1211/","feed_url":"https://patchfirst.co/feed/technique/T1211.json","description":"New and newly exploited CVEs that lead to ATT&CK T1211 Exploitation for Stealth, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-58704#kev","url":"https://patchfirst.co/cve/CVE-2026-58704/","title":"[KEV] CVE-2026-58704: Google Pixel Improper Authorization Vulnerability","content_text":"Google · Pixel. In CISA KEV since 2026-09-16. ENISA EUVD lists it as exploited. EPSS 0.6% (higher than 49.9% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1211 Exploitation for Stealth; T1068 Exploitation for Privilege Escalation. Priority 64.1 of 100.","summary":"Google Pixel Improper Authorization Vulnerability","date_published":"2026-09-16T00:00:00.000Z","date_modified":"2026-10-07T19:17:39.000Z","tags":["kev","T1211","T1068"],"_patchfirst":{"reason":"kev","priority":64.1,"kev":{"dateAdded":"2026-09-16","ransomware":false},"epss":{"score":0.00625,"percentile":0.49932},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Google","product":"Pixel","techniqueIds":["T1211","T1068"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2026-21510#kev","url":"https://patchfirst.co/cve/CVE-2026-21510/","title":"[KEV] CVE-2026-21510: Microsoft Windows Shell Protection Mechanism Failure Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2026-02-10. ENISA EUVD lists it as exploited. EPSS 61.2% (higher than 99.16% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1211 Exploitation for Stealth; T1553 Subvert Trust Controls. Priority 74.0 of 100.","summary":"Microsoft Windows Shell Protection Mechanism Failure Vulnerability","date_published":"2026-02-10T00:00:00.000Z","date_modified":"2026-06-17T10:18:45.000Z","tags":["kev","public-exploit","T1211","T1553"],"_patchfirst":{"reason":"kev","priority":74,"kev":{"dateAdded":"2026-02-10","ransomware":false},"epss":{"score":0.61238,"percentile":0.9916},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1211","T1553"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-21514#kev","url":"https://patchfirst.co/cve/CVE-2026-21514/","title":"[KEV] CVE-2026-21514: Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability","content_text":"Microsoft · Office. In CISA KEV since 2026-02-10. ENISA EUVD lists it as exploited. EPSS 1.6% (higher than 75.6% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1211 Exploitation for Stealth. Priority 68.6 of 100.","summary":"Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability","date_published":"2026-02-10T00:00:00.000Z","date_modified":"2026-06-17T10:18:45.000Z","tags":["kev","public-exploit","T1204.002","T1211"],"_patchfirst":{"reason":"kev","priority":68.6,"kev":{"dateAdded":"2026-02-10","ransomware":false},"epss":{"score":0.01587,"percentile":0.75584},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Office","techniqueIds":["T1204.002","T1211"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-21509#kev","url":"https://patchfirst.co/cve/CVE-2026-21509/","title":"[KEV] CVE-2026-21509: Microsoft Office Security Feature Bypass Vulnerability","content_text":"Microsoft · Office. In CISA KEV since 2026-01-26. ENISA EUVD lists it as exploited. EPSS 70.8% (higher than 99.4% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1211 Exploitation for Stealth. Priority 73.3 of 100.","summary":"Microsoft Office Security Feature Bypass Vulnerability","date_published":"2026-01-26T00:00:00.000Z","date_modified":"2026-06-25T05:16:53.000Z","tags":["kev","public-exploit","T1204.002","T1211"],"_patchfirst":{"reason":"kev","priority":73.3,"kev":{"dateAdded":"2026-01-26","ransomware":false},"epss":{"score":0.70795,"percentile":0.99398},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Office","techniqueIds":["T1204.002","T1211"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-26633#kev","url":"https://patchfirst.co/cve/CVE-2025-26633/","title":"[KEV] CVE-2025-26633: Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2025-03-11, known ransomware use. ENISA EUVD lists it as exploited. EPSS 30.4% (higher than 98.2% of CVEs). CVSS 7.0 HIGH. Public exploit code exists. ATT&CK: T1211 Exploitation for Stealth; T1059 Command and Scripting Interpreter. Priority 77.5 of 100.","summary":"Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability","date_published":"2025-03-11T00:00:00.000Z","date_modified":"2026-09-24T13:10:00.000Z","tags":["kev","ransomware","public-exploit","T1211","T1059"],"_patchfirst":{"reason":"kev","priority":77.5,"kev":{"dateAdded":"2025-03-11","ransomware":true},"epss":{"score":0.30391,"percentile":0.9823},"cvss":{"score":7,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1211","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-24200#kev","url":"https://patchfirst.co/cve/CVE-2025-24200/","title":"[KEV] CVE-2025-24200: Apple iOS and iPadOS Incorrect Authorization Vulnerability","content_text":"Apple · iOS and iPadOS. In CISA KEV since 2025-02-12. ENISA EUVD lists it as exploited. EPSS 4.5% (higher than 91.4% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1211 Exploitation for Stealth; T1005 Data from Local System. Priority 60.6 of 100.","summary":"Apple iOS and iPadOS Incorrect Authorization Vulnerability","date_published":"2025-02-12T00:00:00.000Z","date_modified":"2026-06-17T08:58:17.000Z","tags":["kev","T1211","T1005"],"_patchfirst":{"reason":"kev","priority":60.6,"kev":{"dateAdded":"2025-02-12","ransomware":false},"epss":{"score":0.04457,"percentile":0.91418},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Apple","product":"iOS and iPadOS","techniqueIds":["T1211","T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2024-30040#kev","url":"https://patchfirst.co/cve/CVE-2024-30040/","title":"[KEV] CVE-2024-30040: Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2024-05-14. ENISA EUVD lists it as exploited. EPSS 3.9% (higher than 90.4% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1204.001 Malicious Link; T1211 Exploitation for Stealth. Priority 62.2 of 100.","summary":"Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability","date_published":"2024-05-14T00:00:00.000Z","date_modified":"2026-06-17T07:26:06.000Z","tags":["kev","T1204.001","T1211"],"_patchfirst":{"reason":"kev","priority":62.2,"kev":{"dateAdded":"2024-05-14","ransomware":false},"epss":{"score":0.03939,"percentile":0.90377},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1204.001","T1211"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2024-23296#kev","url":"https://patchfirst.co/cve/CVE-2024-23296/","title":"[KEV] CVE-2024-23296: Apple Multiple Products Memory Corruption Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2024-03-06. ENISA EUVD lists it as exploited. EPSS 1.4% (higher than 72.7% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1211 Exploitation for Stealth. Priority 63.0 of 100.","summary":"Apple Multiple Products Memory Corruption Vulnerability","date_published":"2024-03-06T00:00:00.000Z","date_modified":"2026-06-17T07:12:32.000Z","tags":["kev","public-exploit","T1068","T1211"],"_patchfirst":{"reason":"kev","priority":63,"kev":{"dateAdded":"2024-03-06","ransomware":false},"epss":{"score":0.01411,"percentile":0.72651},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1068","T1211"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-23225#kev","url":"https://patchfirst.co/cve/CVE-2024-23225/","title":"[KEV] CVE-2024-23225: Apple Multiple Products Memory Corruption Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2024-03-06. ENISA EUVD lists it as exploited. EPSS 1.5% (higher than 73.9% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1211 Exploitation for Stealth. Priority 58.2 of 100.","summary":"Apple Multiple Products Memory Corruption Vulnerability","date_published":"2024-03-06T00:00:00.000Z","date_modified":"2026-06-17T07:12:20.000Z","tags":["kev","T1068","T1211"],"_patchfirst":{"reason":"kev","priority":58.2,"kev":{"dateAdded":"2024-03-06","ransomware":false},"epss":{"score":0.01481,"percentile":0.73909},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1068","T1211"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-21237#kev","url":"https://patchfirst.co/cve/CVE-2023-21237/","title":"[KEV] CVE-2023-21237: Android Pixel Information Disclosure Vulnerability","content_text":"Android · Pixel. In CISA KEV since 2024-03-05. ENISA EUVD lists it as exploited. EPSS 0.3% (higher than 18.5% of CVEs). CVSS 5.5 MEDIUM. ATT&CK: T1211 Exploitation for Stealth; T1005 Data from Local System. Priority 45.6 of 100.","summary":"Android Pixel Information Disclosure Vulnerability","date_published":"2024-03-05T00:00:00.000Z","date_modified":"2026-06-17T05:32:08.000Z","tags":["kev","T1211","T1005"],"_patchfirst":{"reason":"kev","priority":45.6,"kev":{"dateAdded":"2024-03-05","ransomware":false},"epss":{"score":0.00266,"percentile":0.18533},"cvss":{"score":5.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Android","product":"Pixel","techniqueIds":["T1211","T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2022-48618#kev","url":"https://patchfirst.co/cve/CVE-2022-48618/","title":"[KEV] CVE-2022-48618: Apple Multiple Products Memory Corruption Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2024-01-31. ENISA EUVD lists it as exploited. EPSS 0.5% (higher than 41.9% of CVEs). CVSS 7.0 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1211 Exploitation for Stealth. Priority 51.3 of 100.","summary":"Apple Multiple Products Memory Corruption Vulnerability","date_published":"2024-01-31T00:00:00.000Z","date_modified":"2026-06-17T05:15:43.000Z","tags":["kev","T1068","T1211"],"_patchfirst":{"reason":"kev","priority":51.3,"kev":{"dateAdded":"2024-01-31","ransomware":false},"epss":{"score":0.00487,"percentile":0.41919},"cvss":{"score":7,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1068","T1211"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-36025#kev","url":"https://patchfirst.co/cve/CVE-2023-36025/","title":"[KEV] CVE-2023-36025: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2023-11-14. ENISA EUVD lists it as exploited. EPSS 88.1% (higher than 99.77% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1211 Exploitation for Stealth. Priority 79.1 of 100.","summary":"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","date_published":"2023-11-14T00:00:00.000Z","date_modified":"2026-06-17T06:05:41.000Z","tags":["kev","public-exploit","T1204.001","T1211"],"_patchfirst":{"reason":"kev","priority":79.1,"kev":{"dateAdded":"2023-11-14","ransomware":false},"epss":{"score":0.88085,"percentile":0.99765},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1204.001","T1211"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-22265#kev","url":"https://patchfirst.co/cve/CVE-2022-22265/","title":"[KEV] CVE-2022-22265: Samsung Mobile Devices Use-After-Free Vulnerability","content_text":"Samsung · Mobile Devices. In CISA KEV since 2023-09-18. ENISA EUVD lists it as exploited. EPSS 0.4% (higher than 33% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1211 Exploitation for Stealth. Priority 50.1 of 100.","summary":"Samsung Mobile Devices Use-After-Free Vulnerability","date_published":"2023-09-18T00:00:00.000Z","date_modified":"2026-06-17T04:28:08.000Z","tags":["kev","T1068","T1211"],"_patchfirst":{"reason":"kev","priority":50.1,"kev":{"dateAdded":"2023-09-18","ransomware":false},"epss":{"score":0.00389,"percentile":0.32967},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Samsung","product":"Mobile Devices","techniqueIds":["T1068","T1211"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-38606","url":"https://patchfirst.co/cve/CVE-2023-38606/","title":"CVE-2023-38606: Apple Multiple Products Kernel Unspecified Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2023-07-26. ENISA EUVD lists it as exploited. EPSS 2.9% (higher than 86.9% of CVEs). CVSS 5.5 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1211 Exploitation for Stealth. Priority 59.2 of 100.","summary":"Apple Multiple Products Kernel Unspecified Vulnerability","date_published":"2023-07-27T00:00:00.000Z","date_modified":"2026-06-17T06:10:49.000Z","tags":["kev","T1068","T1211"],"_patchfirst":{"reason":"published","priority":59.2,"kev":{"dateAdded":"2023-07-26","ransomware":false},"epss":{"score":0.02899,"percentile":0.86925},"cvss":{"score":5.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1068","T1211"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-35311#kev","url":"https://patchfirst.co/cve/CVE-2023-35311/","title":"[KEV] CVE-2023-35311: Microsoft Outlook Security Feature Bypass Vulnerability","content_text":"Microsoft · Outlook. In CISA KEV since 2023-07-11. ENISA EUVD lists it as exploited. EPSS 15.5% (higher than 96.8% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1204.001 Malicious Link; T1211 Exploitation for Stealth. Priority 63.5 of 100.","summary":"Microsoft Outlook Security Feature Bypass Vulnerability","date_published":"2023-07-11T00:00:00.000Z","date_modified":"2026-10-08T10:35:03.000Z","tags":["kev","T1204.001","T1211"],"_patchfirst":{"reason":"kev","priority":63.5,"kev":{"dateAdded":"2023-07-11","ransomware":false},"epss":{"score":0.15522,"percentile":0.96809},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Outlook","techniqueIds":["T1204.001","T1211"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-25395#kev","url":"https://patchfirst.co/cve/CVE-2021-25395/","title":"[KEV] CVE-2021-25395: Samsung Mobile Devices Race Condition Vulnerability","content_text":"Samsung · Mobile Devices. In CISA KEV since 2023-06-29. ENISA EUVD lists it as exploited. EPSS 0.4% (higher than 30.5% of CVEs). CVSS 6.4 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1211 Exploitation for Stealth. Priority 48.6 of 100.","summary":"Samsung Mobile Devices Race Condition Vulnerability","date_published":"2023-06-29T00:00:00.000Z","date_modified":"2026-06-17T03:42:00.000Z","tags":["kev","T1068","T1211"],"_patchfirst":{"reason":"kev","priority":48.6,"kev":{"dateAdded":"2023-06-29","ransomware":false},"epss":{"score":0.00366,"percentile":0.30499},"cvss":{"score":6.4,"severity":"MEDIUM","version":"3.1"},"vendor":"Samsung","product":"Mobile Devices","techniqueIds":["T1068","T1211"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-32409","url":"https://patchfirst.co/cve/CVE-2023-32409/","title":"CVE-2023-32409: Apple Multiple Products WebKit Sandbox Escape Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2023-05-22. ENISA EUVD lists it as exploited. EPSS 16.5% (higher than 97% of CVEs). CVSS 8.6 HIGH. ATT&CK: T1211 Exploitation for Stealth. Priority 63.4 of 100.","summary":"Apple Multiple Products WebKit Sandbox Escape Vulnerability","date_published":"2023-06-23T00:00:00.000Z","date_modified":"2026-06-17T05:58:47.000Z","tags":["kev","T1211"],"_patchfirst":{"reason":"published","priority":63.4,"kev":{"dateAdded":"2023-05-22","ransomware":false},"epss":{"score":0.1653,"percentile":0.97},"cvss":{"score":8.6,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1211"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2022-44698#kev","url":"https://patchfirst.co/cve/CVE-2022-44698/","title":"[KEV] CVE-2022-44698: Microsoft Defender SmartScreen Security Feature Bypass Vulnerability","content_text":"Microsoft · Defender. In CISA KEV since 2022-12-13, known ransomware use. ENISA EUVD lists it as exploited. EPSS 76.3% (higher than 99.54% of CVEs). CVSS 5.4 MEDIUM. ATT&CK: T1204.002 Malicious File; T1211 Exploitation for Stealth. Named in 1 threat report. Priority 75.6 of 100.","summary":"Microsoft Defender SmartScreen Security Feature Bypass Vulnerability","date_published":"2022-12-13T00:00:00.000Z","date_modified":"2026-06-17T05:08:47.000Z","tags":["kev","ransomware","T1204.002","T1211"],"_patchfirst":{"reason":"kev","priority":75.6,"kev":{"dateAdded":"2022-12-13","ransomware":true},"epss":{"score":0.76267,"percentile":0.99536},"cvss":{"score":5.4,"severity":"MEDIUM","version":"3.1"},"vendor":"Microsoft","product":"Defender","techniqueIds":["T1204.002","T1211"],"reportCount":1,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2022-4135#kev","url":"https://patchfirst.co/cve/CVE-2022-4135/","title":"[KEV] CVE-2022-4135: Google Chromium GPU Heap Buffer Overflow Vulnerability","content_text":"Google · Chromium GPU. In CISA KEV since 2022-11-28. ENISA EUVD lists it as exploited. EPSS 31.9% (higher than 98.3% of CVEs). CVSS 9.6 CRITICAL. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1211 Exploitation for Stealth. Priority 69.4 of 100.","summary":"Google Chromium GPU Heap Buffer Overflow Vulnerability","date_published":"2022-11-28T00:00:00.000Z","date_modified":"2026-06-17T05:20:03.000Z","tags":["kev","public-exploit","T1189","T1211"],"_patchfirst":{"reason":"kev","priority":69.4,"kev":{"dateAdded":"2022-11-28","ransomware":false},"epss":{"score":0.31864,"percentile":0.983},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chromium GPU","techniqueIds":["T1189","T1211"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-31010#kev","url":"https://patchfirst.co/cve/CVE-2021-31010/","title":"[KEV] CVE-2021-31010: Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability","content_text":"Apple · iOS, macOS, watchOS. In CISA KEV since 2022-08-25. ENISA EUVD lists it as exploited. EPSS 3.7% (higher than 89.6% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1211 Exploitation for Stealth; T1068 Exploitation for Privilege Escalation. Priority 61.2 of 100.","summary":"Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability","date_published":"2022-08-25T00:00:00.000Z","date_modified":"2026-06-17T03:51:18.000Z","tags":["kev","T1211","T1068"],"_patchfirst":{"reason":"kev","priority":61.2,"kev":{"dateAdded":"2022-08-25","ransomware":false},"epss":{"score":0.03673,"percentile":0.8965},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"iOS, macOS, watchOS","techniqueIds":["T1211","T1068"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2020-3837#kev","url":"https://patchfirst.co/cve/CVE-2020-3837/","title":"[KEV] CVE-2020-3837: Apple Multiple Products Memory Corruption Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2022-06-27. ENISA EUVD lists it as exploited. EPSS 14.8% (higher than 96.7% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1211 Exploitation for Stealth; T1068 Exploitation for Privilege Escalation. Priority 67.8 of 100.","summary":"Apple Multiple Products Memory Corruption Vulnerability","date_published":"2022-06-27T00:00:00.000Z","date_modified":"2026-06-17T03:19:07.000Z","tags":["kev","public-exploit","T1211","T1068"],"_patchfirst":{"reason":"kev","priority":67.8,"kev":{"dateAdded":"2022-06-27","ransomware":false},"epss":{"score":0.14774,"percentile":0.96677},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1211","T1068"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-30983#kev","url":"https://patchfirst.co/cve/CVE-2021-30983/","title":"[KEV] CVE-2021-30983: Apple iOS and iPadOS Buffer Overflow Vulnerability","content_text":"Apple · iOS and iPadOS. In CISA KEV since 2022-06-27. ENISA EUVD lists it as exploited. EPSS 2.9% (higher than 87% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1211 Exploitation for Stealth; T1068 Exploitation for Privilege Escalation. Priority 60.9 of 100.","summary":"Apple iOS and iPadOS Buffer Overflow Vulnerability","date_published":"2022-06-27T00:00:00.000Z","date_modified":"2026-06-17T03:51:15.000Z","tags":["kev","T1211","T1068"],"_patchfirst":{"reason":"kev","priority":60.9,"kev":{"dateAdded":"2022-06-27","ransomware":false},"epss":{"score":0.02923,"percentile":0.87033},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"iOS and iPadOS","techniqueIds":["T1211","T1068"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2010-0738#kev","url":"https://patchfirst.co/cve/CVE-2010-0738/","title":"[KEV] CVE-2010-0738: Red Hat JBoss Authentication Bypass Vulnerability","content_text":"Red Hat · JBoss. In CISA KEV since 2022-05-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 73.8% (higher than 99.48% of CVEs). CVSS 5.3 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1211 Exploitation for Stealth. Priority 76.6 of 100.","summary":"Red Hat JBoss Authentication Bypass Vulnerability","date_published":"2022-05-25T00:00:00.000Z","date_modified":"2026-10-02T14:55:30.000Z","tags":["kev","ransomware","public-exploit","T1190","T1211"],"_patchfirst":{"reason":"kev","priority":76.6,"kev":{"dateAdded":"2022-05-25","ransomware":true},"epss":{"score":0.73815,"percentile":0.99476},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Red Hat","product":"JBoss","techniqueIds":["T1190","T1211"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2015-0016#kev","url":"https://patchfirst.co/cve/CVE-2015-0016/","title":"[KEV] CVE-2015-0016: Microsoft Windows TS WebProxy Directory Traversal Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2022-05-25. ENISA EUVD lists it as exploited. EPSS 75.8% (higher than 99.52% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1211 Exploitation for Stealth; T1068 Exploitation for Privilege Escalation. Priority 68.4 of 100.","summary":"Microsoft Windows TS WebProxy Directory Traversal Vulnerability","date_published":"2022-05-25T00:00:00.000Z","date_modified":"2026-06-17T00:19:25.000Z","tags":["kev","public-exploit","T1211","T1068"],"_patchfirst":{"reason":"kev","priority":68.4,"kev":{"dateAdded":"2022-05-25","ransomware":false},"epss":{"score":0.75777,"percentile":0.99523},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1211","T1068"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2013-2423#kev","url":"https://patchfirst.co/cve/CVE-2013-2423/","title":"[KEV] CVE-2013-2423: Oracle JRE Unspecified Vulnerability","content_text":"Oracle · Java Runtime Environment (JRE). In CISA KEV since 2022-05-25. ENISA EUVD lists it as exploited. EPSS 85.2% (higher than 99.72% of CVEs). CVSS 3.7 LOW. Public exploit code exists. ATT&CK: T1211 Exploitation for Stealth. Named in 1 threat report. Priority 64.4 of 100.","summary":"Oracle JRE Unspecified Vulnerability","date_published":"2022-05-25T00:00:00.000Z","date_modified":"2026-06-16T23:53:20.000Z","tags":["kev","public-exploit","T1211"],"_patchfirst":{"reason":"kev","priority":64.4,"kev":{"dateAdded":"2022-05-25","ransomware":false},"epss":{"score":0.85215,"percentile":0.99715},"cvss":{"score":3.7,"severity":"LOW","version":"3.1"},"vendor":"Oracle","product":"Java Runtime Environment (JRE)","techniqueIds":["T1211"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2013-0431#kev","url":"https://patchfirst.co/cve/CVE-2013-0431/","title":"[KEV] CVE-2013-0431: Oracle JRE Sandbox Bypass Vulnerability","content_text":"Oracle · Java Runtime Environment (JRE). In CISA KEV since 2022-05-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 90.1% (higher than 99.8% of CVEs). CVSS 3.7 LOW. Public exploit code exists. ATT&CK: T1211 Exploitation for Stealth. Priority 60.5 of 100.","summary":"Oracle JRE Sandbox Bypass Vulnerability","date_published":"2022-05-25T00:00:00.000Z","date_modified":"2026-10-02T14:55:14.000Z","tags":["kev","ransomware","public-exploit","T1211"],"_patchfirst":{"reason":"kev","priority":60.5,"kev":{"dateAdded":"2022-05-25","ransomware":true},"epss":{"score":0.9015,"percentile":0.99796},"cvss":{"score":3.7,"severity":"LOW","version":"3.1"},"vendor":"Oracle","product":"Java Runtime Environment (JRE)","techniqueIds":["T1211"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2015-0071#kev","url":"https://patchfirst.co/cve/CVE-2015-0071/","title":"[KEV] CVE-2015-0071: Microsoft Internet Explorer ASLR Bypass Vulnerability","content_text":"Microsoft · Internet Explorer. In CISA KEV since 2022-05-25. ENISA EUVD lists it as exploited. EPSS 33.6% (higher than 98.4% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1211 Exploitation for Stealth; T1189 Drive-by Compromise. Priority 47.2 of 100.","summary":"Microsoft Internet Explorer ASLR Bypass Vulnerability","date_published":"2022-05-25T00:00:00.000Z","date_modified":"2026-06-17T00:19:30.000Z","tags":["kev","T1211","T1189"],"_patchfirst":{"reason":"kev","priority":47.2,"kev":{"dateAdded":"2022-05-25","ransomware":false},"epss":{"score":0.33581,"percentile":0.9838},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Microsoft","product":"Internet Explorer","techniqueIds":["T1211","T1189"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-30883#kev","url":"https://patchfirst.co/cve/CVE-2021-30883/","title":"[KEV] CVE-2021-30883: Apple Multiple Products Memory Corruption Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2022-05-23. ENISA EUVD lists it as exploited. EPSS 14.7% (higher than 96.7% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1211 Exploitation for Stealth; T1068 Exploitation for Privilege Escalation. Priority 62.8 of 100.","summary":"Apple Multiple Products Memory Corruption Vulnerability","date_published":"2022-05-23T00:00:00.000Z","date_modified":"2026-06-17T03:51:04.000Z","tags":["kev","T1211","T1068"],"_patchfirst":{"reason":"kev","priority":62.8,"kev":{"dateAdded":"2022-05-23","ransomware":false},"epss":{"score":0.14721,"percentile":0.9667},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1211","T1068"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2022-21999#kev","url":"https://patchfirst.co/cve/CVE-2022-21999/","title":"[KEV] CVE-2022-21999: Microsoft Windows Print Spooler Privilege Escalation Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2022-03-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 41.0% (higher than 98.7% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter; T1136.001 Local Account; T1211 Exploitation for Stealth. Priority 78.2 of 100.","summary":"Microsoft Windows Print Spooler Privilege Escalation Vulnerability","date_published":"2022-03-25T00:00:00.000Z","date_modified":"2026-06-17T04:27:26.000Z","tags":["kev","ransomware","public-exploit","T1078","T1068","T1059","T1136.001","T1211"],"_patchfirst":{"reason":"kev","priority":78.2,"kev":{"dateAdded":"2022-03-25","ransomware":true},"epss":{"score":0.41007,"percentile":0.98658},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1078","T1068","T1059","T1136.001","T1211"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2012-0507#kev","url":"https://patchfirst.co/cve/CVE-2012-0507/","title":"[KEV] CVE-2012-0507: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","content_text":"Oracle · Java SE. In CISA KEV since 2022-03-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 98.2% (higher than 99.91% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1211 Exploitation for Stealth; T1499.004 Application or System Exploitation. Named in 2 threat reports. Priority 86.0 of 100.","summary":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","date_published":"2022-03-03T00:00:00.000Z","date_modified":"2026-08-14T05:16:51.000Z","tags":["kev","ransomware","public-exploit","T1190","T1211","T1499.004"],"_patchfirst":{"reason":"kev","priority":86,"kev":{"dateAdded":"2022-03-03","ransomware":true},"epss":{"score":0.98189,"percentile":0.99914},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Oracle","product":"Java SE","techniqueIds":["T1190","T1211","T1499.004"],"reportCount":2,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-42292#kev","url":"https://patchfirst.co/cve/CVE-2021-42292/","title":"[KEV] CVE-2021-42292: Microsoft Excel Security Feature Bypass","content_text":"Microsoft · Office. In CISA KEV since 2021-11-17. ENISA EUVD lists it as exploited. EPSS 43.0% (higher than 98.7% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1211 Exploitation for Stealth. Priority 68.2 of 100.","summary":"Microsoft Excel Security Feature Bypass","date_published":"2021-11-17T00:00:00.000Z","date_modified":"2026-08-19T19:23:04.000Z","tags":["kev","public-exploit","T1204.002","T1211"],"_patchfirst":{"reason":"kev","priority":68.2,"kev":{"dateAdded":"2021-11-17","ransomware":false},"epss":{"score":0.43005,"percentile":0.98719},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Office","techniqueIds":["T1204.002","T1211"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2019-16256#kev","url":"https://patchfirst.co/cve/CVE-2019-16256/","title":"[KEV] CVE-2019-16256: SIMalliance Toolbox Browser Command Injection Vulnerability","content_text":"SIMalliance · Toolbox Browser. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 4.9% (higher than 92.2% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1211 Exploitation for Stealth; T1005 Data from Local System; T1059 Command and Scripting Interpreter. Priority 68.3 of 100.","summary":"SIMalliance Toolbox Browser Command Injection Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T02:22:00.000Z","tags":["kev","public-exploit","T1211","T1005","T1059"],"_patchfirst":{"reason":"kev","priority":68.3,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.04949,"percentile":0.92154},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"SIMalliance","product":"Toolbox Browser","techniqueIds":["T1211","T1005","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2020-1464#kev","url":"https://patchfirst.co/cve/CVE-2020-1464/","title":"[KEV] CVE-2020-1464: Microsoft Windows Spoofing Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 38.9% (higher than 98.6% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1211 Exploitation for Stealth; T1553 Subvert Trust Controls. Priority 68.2 of 100.","summary":"Microsoft Windows Spoofing Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T03:01:28.000Z","tags":["kev","public-exploit","T1211","T1553"],"_patchfirst":{"reason":"kev","priority":68.2,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.38946,"percentile":0.98588},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1211","T1553"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-30633#kev","url":"https://patchfirst.co/cve/CVE-2021-30633/","title":"[KEV] CVE-2021-30633: Google Chromium Indexed DB API Use-After-Free Vulnerability","content_text":"Google · Chromium Indexed DB API. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 33.2% (higher than 98.4% of CVEs). CVSS 9.6 CRITICAL. ATT&CK: T1189 Drive-by Compromise; T1211 Exploitation for Stealth. Priority 64.4 of 100.","summary":"Google Chromium Indexed DB API Use-After-Free Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T03:50:36.000Z","tags":["kev","T1189","T1211"],"_patchfirst":{"reason":"kev","priority":64.4,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.3318,"percentile":0.98364},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chromium Indexed DB API","techniqueIds":["T1189","T1211"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-37973#kev","url":"https://patchfirst.co/cve/CVE-2021-37973/","title":"[KEV] CVE-2021-37973: Google Chromium Portals Use-After-Free Vulnerability","content_text":"Google · Chromium Portals. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 11.7% (higher than 96.1% of CVEs). CVSS 9.6 CRITICAL. ATT&CK: T1189 Drive-by Compromise; T1211 Exploitation for Stealth. Priority 63.9 of 100.","summary":"Google Chromium Portals Use-After-Free Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T04:01:19.000Z","tags":["kev","T1189","T1211"],"_patchfirst":{"reason":"kev","priority":63.9,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.11735,"percentile":0.96065},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chromium Portals","techniqueIds":["T1189","T1211"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2020-1040#kev","url":"https://patchfirst.co/cve/CVE-2020-1040/","title":"[KEV] CVE-2020-1040: Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability","content_text":"Microsoft · Hyper-V RemoteFX. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 7.4% (higher than 94.4% of CVEs). CVSS 9.0 CRITICAL. ATT&CK: T1211 Exploitation for Stealth; T1059 Command and Scripting Interpreter. Priority 63.2 of 100.","summary":"Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T03:00:17.000Z","tags":["kev","T1211","T1059"],"_patchfirst":{"reason":"kev","priority":63.2,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.07393,"percentile":0.94419},"cvss":{"score":9,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Hyper-V RemoteFX","techniqueIds":["T1211","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2020-3244","url":"https://patchfirst.co/cve/CVE-2020-3244/","title":"CVE-2020-3244: Cisco ASR 5000 Series Aggregation Services Routers Enhanced Charging Service Rule Bypass Vulnerability","content_text":"Cisco · Cisco ASR 5000 Series Software. Not in CISA KEV. EPSS 1.0% (higher than 63.1% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1211 Exploitation for Stealth. Priority 16.3 of 100.","summary":"Cisco ASR 5000 Series Aggregation Services Routers Enhanced Charging Service Rule Bypass Vulnerability","date_published":"2020-06-18T00:00:00.000Z","date_modified":"2024-11-15T16:59:30.000Z","tags":["T1190","T1211"],"_patchfirst":{"reason":"published","priority":16.3,"kev":null,"epss":{"score":0.01011,"percentile":0.63146},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco ASR 5000 Series Software","techniqueIds":["T1190","T1211"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-11019","url":"https://patchfirst.co/cve/CVE-2020-11019/","title":"CVE-2020-11019: Out of bound read in update_recv in FreeRDP","content_text":"FreeRDP · FreeRDP. Not in CISA KEV. EPSS 2.3% (higher than 83.1% of CVEs). CVSS 4.3 MEDIUM. Public exploit code exists. ATT&CK: T1005 Data from Local System; T1499.004 Application or System Exploitation; T1211 Exploitation for Stealth. Priority 24.6 of 100.","summary":"Out of bound read in update_recv in FreeRDP","date_published":"2020-05-29T00:00:00.000Z","date_modified":"2024-08-04T11:21:14.000Z","tags":["public-exploit","T1005","T1499.004","T1211"],"_patchfirst":{"reason":"published","priority":24.6,"kev":null,"epss":{"score":0.02278,"percentile":0.83099},"cvss":{"score":4.3,"severity":"MEDIUM","version":"3.1"},"vendor":"FreeRDP","product":"FreeRDP","techniqueIds":["T1005","T1499.004","T1211"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2020-11087","url":"https://patchfirst.co/cve/CVE-2020-11087/","title":"CVE-2020-11087: Out-of-bounds Read in FreeRDP","content_text":"FreeRDP · FreeRDP. Not in CISA KEV. EPSS 1.4% (higher than 72.9% of CVEs). CVSS 3.1 LOW. ATT&CK: T1005 Data from Local System; T1211 Exploitation for Stealth. Priority 16.7 of 100.","summary":"Out-of-bounds Read in FreeRDP","date_published":"2020-05-29T00:00:00.000Z","date_modified":"2024-08-04T11:21:14.000Z","tags":["T1005","T1211"],"_patchfirst":{"reason":"published","priority":16.7,"kev":null,"epss":{"score":0.01425,"percentile":0.72898},"cvss":{"score":3.1,"severity":"LOW","version":"3.1"},"vendor":"FreeRDP","product":"FreeRDP","techniqueIds":["T1005","T1211"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-1141","url":"https://patchfirst.co/cve/CVE-2020-1141/","title":"CVE-2020-1141: Windows GDI Information Disclosure Vulnerability","content_text":"Microsoft · Windows 10 Version 1507. Not in CISA KEV. EPSS 2.0% (higher than 80.9% of CVEs). CVSS 5.5 MEDIUM. ATT&CK: T1005 Data from Local System; T1211 Exploitation for Stealth. Priority 20.0 of 100.","summary":"Windows GDI Information Disclosure Vulnerability","date_published":"2020-05-21T00:00:00.000Z","date_modified":"2026-08-19T16:34:10.000Z","tags":["T1005","T1211"],"_patchfirst":{"reason":"published","priority":20,"kev":null,"epss":{"score":0.02018,"percentile":0.80904},"cvss":{"score":5.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1507","techniqueIds":["T1005","T1211"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2013-2460","url":"https://patchfirst.co/cve/CVE-2013-2460/","title":"CVE-2013-2460: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier…","content_text":"Not in CISA KEV. EPSS 70.0% (higher than 99.38% of CVEs). Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1211 Exploitation for Stealth. Named in 2 threat reports. Priority 67.4 of 100.","summary":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier…","date_published":"2013-06-18T00:00:00.000Z","date_modified":"2024-08-06T15:36:46.000Z","tags":["public-exploit","T1190","T1211"],"_patchfirst":{"reason":"published","priority":67.4,"kev":null,"epss":{"score":0.7004,"percentile":0.99375},"cvss":null,"vendor":null,"product":null,"techniqueIds":["T1190","T1211"],"reportCount":2,"hasPublicExploit":true,"euvdExploited":false}}]}