https://patchfirst.co/technique/T1499.004/New and newly exploited CVEs that lead to ATT&CK T1499.004 Application or System Exploitation, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-76418/CVE-2026-76418#kevThu, 29 Oct 2026 00:00:00 GMTCisco · Secure Firewall ASA Software and Cisco Secure FTD Software. In CISA KEV since 2026-10-29. ENISA EUVD lists it as exploited. EPSS 0.9% (higher than 59.9% of CVEs). CVSS 8.6 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Priority 64.4 of 100.kevT1190T1499.004https://patchfirst.co/cve/CVE-2026-111497/CVE-2026-111497#kevTue, 27 Oct 2026 00:00:00 GMTGoogle · Brotli. In CISA KEV since 2026-10-27. ENISA EUVD lists it as exploited. EPSS 82.6% (higher than 99.67% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System; T1059 Command and Scripting Interpreter; T1499.004 Application or System Exploitation. Priority 79.8 of 100.kevpublic-exploitT1190T1005T1059T1499.004https://patchfirst.co/cve/CVE-2015-5477/CVE-2015-5477#kevThu, 08 Oct 2026 00:00:00 GMTISC · BIND. In CISA KEV since 2026-10-08. ENISA EUVD lists it as exploited. EPSS 99.6% (higher than 99.95% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Priority 68.2 of 100.kevpublic-exploitT1190T1499.004https://patchfirst.co/cve/CVE-2025-39964/CVE-2025-39964#kevFri, 18 Sep 2026 00:00:00 GMTLinux · Kernel. In CISA KEV since 2026-09-18. ENISA EUVD lists it as exploited. EPSS 1.6% (higher than 75.3% of CVEs). CVSS 5.5 MEDIUM. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1499.004 Application or System Exploitation. Priority 71.9 of 100.kevpublic-exploitT1068T1499.004https://patchfirst.co/cve/CVE-2026-67277/CVE-2026-67277#kevThu, 10 Sep 2026 00:00:00 GMTMikroTik · RouterOS. In CISA KEV since 2026-09-10. ENISA EUVD lists it as exploited. EPSS 1.6% (higher than 75.2% of CVEs). CVSS 8.2 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System; T1499.004 Application or System Exploitation. Priority 73.8 of 100.kevpublic-exploitT1190T1005T1499.004https://patchfirst.co/cve/CVE-2026-8452/CVE-2026-8452#kevWed, 26 Aug 2026 00:00:00 GMTCitrix · NetScaler ADC and NetScaler Gateway. In CISA KEV since 2026-08-26. ENISA EUVD lists it as exploited. EPSS 1.0% (higher than 63.1% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Priority 72.5 of 100.kevpublic-exploitT1190T1499.004https://patchfirst.co/cve/CVE-2026-20349/CVE-2026-20349#kevTue, 11 Aug 2026 00:00:00 GMTCisco · Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) . In CISA KEV since 2026-08-11. ENISA EUVD lists it as exploited. EPSS 1.0% (higher than 63.1% of CVEs). CVSS 8.6 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Priority 71.6 of 100.kevpublic-exploitT1190T1499.004https://patchfirst.co/cve/CVE-2023-4346/CVE-2023-4346#kevWed, 15 Jul 2026 00:00:00 GMTKNX Association · KNX Protocol Connection Authorization Option 1. In CISA KEV since 2026-07-15. ENISA EUVD lists it as exploited. EPSS 1.4% (higher than 71.8% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Priority 62.6 of 100.kevT1190T1499.004https://patchfirst.co/cve/CVE-2025-43520/CVE-2025-43520#kevFri, 20 Mar 2026 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2026-03-20. ENISA EUVD lists it as exploited. EPSS 0.4% (higher than 36.8% of CVEs). CVSS 5.5 MEDIUM. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1068 Exploitation for Privilege Escalation; T1499.004 Application or System Exploitation. Priority 59.2 of 100.kevpublic-exploitT1204.002T1068T1499.004https://patchfirst.co/cve/CVE-2026-21525/CVE-2026-21525#kevTue, 10 Feb 2026 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2026-02-10. ENISA EUVD lists it as exploited. EPSS 4.9% (higher than 92% of CVEs). CVSS 6.2 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1499.004 Application or System Exploitation. Priority 65.7 of 100.kevT1068T1499.004https://patchfirst.co/cve/CVE-2021-22555/CVE-2021-22555#kevMon, 06 Oct 2025 00:00:00 GMTLinux · Kernel. In CISA KEV since 2025-10-06. ENISA EUVD lists it as exploited. EPSS 78.7% (higher than 99.59% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1499.004 Application or System Exploitation. Priority 68.4 of 100.kevpublic-exploitT1068T1499.004https://patchfirst.co/cve/CVE-2025-20362/CVE-2025-20362#kevThu, 25 Sep 2025 00:00:00 GMTCisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense. In CISA KEV since 2025-09-25. ENISA EUVD lists it as exploited. EPSS 87.1% (higher than 99.75% of CVEs). CVSS 8.6 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Named in 5 threat reports. Priority 79.0 of 100.kevpublic-exploitT1190T1499.004https://patchfirst.co/cve/CVE-2014-3931/CVE-2014-3931#kevMon, 07 Jul 2025 00:00:00 GMTLooking Glass · Multi-Router Looking Glass (MRLG). In CISA KEV since 2025-07-07. ENISA EUVD lists it as exploited. EPSS 29.0% (higher than 98.2% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Priority 69.5 of 100.kevpublic-exploitT1190T1499.004https://patchfirst.co/cve/CVE-2025-27363/CVE-2025-27363#kevTue, 06 May 2025 00:00:00 GMTFreeType · FreeType. In CISA KEV since 2025-05-06. ENISA EUVD lists it as exploited. EPSS 27.8% (higher than 98.1% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1574 Hijack Execution Flow; T1499.004 Application or System Exploitation. Priority 68.3 of 100.kevpublic-exploitT1574T1499.004https://patchfirst.co/cve/CVE-2024-3393/CVE-2024-3393#kevMon, 30 Dec 2024 00:00:00 GMTPalo Alto Networks · PAN-OS. In CISA KEV since 2024-12-30. ENISA EUVD lists it as exploited. EPSS 29.1% (higher than 98.2% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Priority 62.9 of 100.kevT1190T1499.004https://patchfirst.co/cve/CVE-2024-20481/CVE-2024-20481#kevThu, 24 Oct 2024 00:00:00 GMTCisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD). In CISA KEV since 2024-10-24. ENISA EUVD lists it as exploited. EPSS 15.9% (higher than 96.9% of CVEs). CVSS 5.8 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Priority 61.4 of 100.kevT1190T1499.004https://patchfirst.co/cve/CVE-2024-40766/CVE-2024-40766#kevMon, 09 Sep 2024 00:00:00 GMTSonicWall · SonicOS. In CISA KEV since 2024-09-09, known ransomware use. ENISA EUVD lists it as exploited. EPSS 18.4% (higher than 97.2% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System; T1499.004 Application or System Exploitation. Priority 74.3 of 100.kevransomwareT1190T1005T1499.004https://patchfirst.co/cve/CVE-2023-29552/CVE-2023-29552#kevWed, 08 Nov 2023 00:00:00 GMTIETF · Service Location Protocol (SLP). In CISA KEV since 2023-11-08. ENISA EUVD lists it as exploited. EPSS 64.0% (higher than 99.22% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Priority 78.1 of 100.kevpublic-exploitT1190T1499.004https://patchfirst.co/cve/CVE-2021-25489/CVE-2021-25489#kevThu, 29 Jun 2023 00:00:00 GMTSamsung · Mobile Devices. In CISA KEV since 2023-06-29. ENISA EUVD lists it as exploited. EPSS 0.5% (higher than 44.8% of CVEs). CVSS 5.5 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1499.004 Application or System Exploitation. Priority 50.8 of 100.kevT1068T1499.004https://patchfirst.co/cve/CVE-2023-33009/CVE-2023-33009#kevMon, 05 Jun 2023 00:00:00 GMTZyxel · Multiple Firewalls. In CISA KEV since 2023-06-05. ENISA EUVD lists it as exploited. EPSS 28.1% (higher than 98.1% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1499.004 Application or System Exploitation. Priority 64.5 of 100.kevT1190T1059T1499.004https://patchfirst.co/cve/CVE-2023-33010/CVE-2023-33010#kevMon, 05 Jun 2023 00:00:00 GMTZyxel · Multiple Firewalls. In CISA KEV since 2023-06-05. ENISA EUVD lists it as exploited. EPSS 29.0% (higher than 98.2% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1499.004 Application or System Exploitation. Priority 64.5 of 100.kevT1190T1059T1499.004https://patchfirst.co/cve/CVE-2015-2291/CVE-2015-2291#kevFri, 10 Feb 2023 00:00:00 GMTIntel · Ethernet Diagnostics Driver for Windows. In CISA KEV since 2023-02-10, known ransomware use. ENISA EUVD lists it as exploited. EPSS 15.7% (higher than 96.9% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter; T1499.004 Application or System Exploitation. Named in 1 threat report. Priority 81.7 of 100.kevransomwarepublic-exploitT1068T1059T1499.004https://patchfirst.co/cve/CVE-2021-25370/CVE-2021-25370#kevTue, 08 Nov 2022 00:00:00 GMTSamsung · Mobile Devices. In CISA KEV since 2022-11-08. ENISA EUVD lists it as exploited. EPSS 0.9% (higher than 59.3% of CVEs). CVSS 4.4 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1499.004 Application or System Exploitation. Priority 52.9 of 100.kevT1068T1499.004https://patchfirst.co/cve/CVE-2012-1889/CVE-2012-1889#kevWed, 08 Jun 2022 00:00:00 GMTMicrosoft · XML Core Services. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 83.5% (higher than 99.68% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter; T1499.004 Application or System Exploitation. Named in 3 threat reports. Priority 76.8 of 100.kevpublic-exploitT1189T1059T1499.004https://patchfirst.co/cve/CVE-2016-1646/CVE-2016-1646#kevWed, 08 Jun 2022 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 48.1% (higher than 98.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1499.004 Application or System Exploitation. Priority 68.9 of 100.kevpublic-exploitT1189T1499.004https://patchfirst.co/cve/CVE-2011-0609/CVE-2011-0609#kevWed, 08 Jun 2022 00:00:00 GMTAdobe · Flash Player. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 63.5% (higher than 99.21% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution; T1499.004 Application or System Exploitation. Priority 68.3 of 100.kevpublic-exploitT1189T1203T1499.004https://patchfirst.co/cve/CVE-2019-5825/CVE-2019-5825#kevWed, 08 Jun 2022 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 55.9% (higher than 99.05% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1499.004 Application or System Exploitation. Priority 67.4 of 100.kevpublic-exploitT1189T1499.004https://patchfirst.co/cve/CVE-2016-0034/CVE-2016-0034#kevWed, 25 May 2022 00:00:00 GMTMicrosoft · Silverlight. In CISA KEV since 2022-05-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 69.4% (higher than 99.36% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1059 Command and Scripting Interpreter; T1189 Drive-by Compromise; T1499.004 Application or System Exploitation. Named in 3 threat reports. Priority 66.8 of 100.kevransomwareT1059T1189T1499.004https://patchfirst.co/cve/CVE-2017-0149/CVE-2017-0149#kevTue, 24 May 2022 00:00:00 GMTMicrosoft · Internet Explorer. In CISA KEV since 2022-05-24. ENISA EUVD lists it as exploited. EPSS 29.2% (higher than 98.2% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1499.004 Application or System Exploitation; T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 48.8 of 100.kevT1499.004T1189T1203https://patchfirst.co/cve/CVE-2019-5786/CVE-2019-5786#kevMon, 23 May 2022 00:00:00 GMTGoogle · Chrome Blink. In CISA KEV since 2022-05-23. ENISA EUVD lists it as exploited. EPSS 61.1% (higher than 99.16% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1499.004 Application or System Exploitation. Priority 67.4 of 100.kevpublic-exploitT1189T1499.004https://patchfirst.co/cve/CVE-2016-4523/CVE-2016-4523#kevFri, 15 Apr 2022 00:00:00 GMTTrihedral · VTScada (formerly VTS). In CISA KEV since 2022-04-15. ENISA EUVD lists it as exploited. EPSS 31.2% (higher than 98.3% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Priority 62.9 of 100.kevT1190T1499.004https://patchfirst.co/cve/CVE-2015-5122/CVE-2015-5122#kevWed, 13 Apr 2022 00:00:00 GMTAdobe · Flash Player. In CISA KEV since 2022-04-13. ENISA EUVD lists it as exploited. EPSS 87.0% (higher than 99.75% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1059 Command and Scripting Interpreter; T1499.004 Application or System Exploitation. Named in 1 threat report. Priority 68.7 of 100.kevpublic-exploitT1059T1499.004https://patchfirst.co/cve/CVE-2015-2502/CVE-2015-2502#kevWed, 13 Apr 2022 00:00:00 GMTMicrosoft · Internet Explorer. In CISA KEV since 2022-04-13. ENISA EUVD lists it as exploited. EPSS 51.0% (higher than 98.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1499.004 Application or System Exploitation; T1203 Exploitation for Client Execution. Priority 53.9 of 100.kevpublic-exploitT1499.004T1203https://patchfirst.co/cve/CVE-2015-5123/CVE-2015-5123#kevWed, 13 Apr 2022 00:00:00 GMTAdobe · Flash Player. In CISA KEV since 2022-04-13. ENISA EUVD lists it as exploited. EPSS 18.8% (higher than 97.3% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1059 Command and Scripting Interpreter; T1499.004 Application or System Exploitation. Priority 49.3 of 100.kevT1059T1499.004https://patchfirst.co/cve/CVE-2021-21551/CVE-2021-21551#kevThu, 31 Mar 2022 00:00:00 GMTDell · dbutil Driver. In CISA KEV since 2022-03-31. ENISA EUVD lists it as exploited. EPSS 79.6% (higher than 99.61% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1005 Data from Local System; T1499.004 Application or System Exploitation. Priority 68.4 of 100.kevpublic-exploitT1068T1005T1499.004https://patchfirst.co/cve/CVE-2016-7200/CVE-2016-7200#kevMon, 28 Mar 2022 00:00:00 GMTMicrosoft · Edge. In CISA KEV since 2022-03-28. ENISA EUVD lists it as exploited. EPSS 82.8% (higher than 99.67% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1059 Command and Scripting Interpreter; T1499.004 Application or System Exploitation. Priority 79.1 of 100.kevpublic-exploitT1059T1499.004https://patchfirst.co/cve/CVE-2016-7201/CVE-2016-7201#kevMon, 28 Mar 2022 00:00:00 GMTMicrosoft · Edge. In CISA KEV since 2022-03-28. ENISA EUVD lists it as exploited. EPSS 80.0% (higher than 99.61% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution; T1499.004 Application or System Exploitation. Priority 79.1 of 100.kevpublic-exploitT1189T1203T1499.004https://patchfirst.co/cve/CVE-2017-3881/CVE-2017-3881#kevFri, 25 Mar 2022 00:00:00 GMTCisco · IOS and IOS XE. In CISA KEV since 2022-03-25. ENISA EUVD lists it as exploited. EPSS 99.0% (higher than 99.93% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1059 Command and Scripting Interpreter; T1499.004 Application or System Exploitation; T1190 Exploit Public-Facing Application. Named in 1 threat report. Priority 73.7 of 100.kevpublic-exploitT1059T1499.004T1190https://patchfirst.co/cve/CVE-2018-0125/CVE-2018-0125#kevFri, 25 Mar 2022 00:00:00 GMTCisco · VPN Routers. In CISA KEV since 2022-03-25. ENISA EUVD lists it as exploited. EPSS 55.2% (higher than 99.03% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1499.004 Application or System Exploitation. Priority 64.7 of 100.kevT1190T1059T1499.004https://patchfirst.co/cve/CVE-2015-4068/CVE-2015-4068#kevFri, 25 Mar 2022 00:00:00 GMTArcserve · Unified Data Protection (UDP). In CISA KEV since 2022-03-25. ENISA EUVD lists it as exploited. EPSS 63.6% (higher than 99.22% of CVEs). CVSS 9.1 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System; T1499.004 Application or System Exploitation. Priority 64.2 of 100.kevT1190T1005T1499.004https://patchfirst.co/cve/CVE-2010-3035/CVE-2010-3035#kevFri, 25 Mar 2022 00:00:00 GMTCisco · IOS XR. In CISA KEV since 2022-03-25. ENISA EUVD lists it as exploited. EPSS 5.7% (higher than 93% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Priority 61.8 of 100.kevT1190T1499.004https://patchfirst.co/cve/CVE-2009-2055/CVE-2009-2055#kevFri, 25 Mar 2022 00:00:00 GMTCisco · IOS XR. In CISA KEV since 2022-03-25. ENISA EUVD lists it as exploited. EPSS 3.3% (higher than 88.6% of CVEs). CVSS 5.9 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Priority 59.8 of 100.kevT1190T1499.004https://patchfirst.co/cve/CVE-2020-5135/CVE-2020-5135#kevTue, 15 Mar 2022 00:00:00 GMTSonicWall · SonicOS. In CISA KEV since 2022-03-15, known ransomware use. ENISA EUVD lists it as exploited. EPSS 26.9% (higher than 98% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1499.004 Application or System Exploitation. Priority 74.5 of 100.kevransomwareT1190T1059T1499.004https://patchfirst.co/cve/CVE-2022-22719/CVE-2022-22719Mon, 14 Mar 2022 00:00:00 GMTApache Software Foundation · Apache HTTP Server. Not in CISA KEV. EPSS 69.1% (higher than 99.35% of CVEs). ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Named in 1 threat report. Priority 24.8 of 100.T1190T1499.004https://patchfirst.co/cve/CVE-2012-0507/CVE-2012-0507#kevThu, 03 Mar 2022 00:00:00 GMTOracle · Java SE. In CISA KEV since 2022-03-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 98.2% (higher than 99.91% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1211 Exploitation for Stealth; T1499.004 Application or System Exploitation. Named in 2 threat reports. Priority 86.0 of 100.kevransomwarepublic-exploitT1190T1211T1499.004https://patchfirst.co/cve/CVE-2017-6736/CVE-2017-6736#kevThu, 03 Mar 2022 00:00:00 GMTCisco · IOS and IOS XE Software. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 70.4% (higher than 99.38% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter; T1499.004 Application or System Exploitation. Named in 1 threat report. Priority 72.9 of 100.kevpublic-exploitT1078T1059T1499.004https://patchfirst.co/cve/CVE-2015-2424/CVE-2015-2424#kevThu, 03 Mar 2022 00:00:00 GMTMicrosoft · PowerPoint. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 40.1% (higher than 98.6% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1204.002 Malicious File; T1203 Exploitation for Client Execution; T1499.004 Application or System Exploitation. Named in 1 threat report. Priority 67.8 of 100.kevT1204.002T1203T1499.004https://patchfirst.co/cve/CVE-2020-11899/CVE-2020-11899#kevThu, 03 Mar 2022 00:00:00 GMTTreck TCP/IP stack · IPv6. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 18.4% (higher than 97.2% of CVEs). CVSS 5.4 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Priority 66.2 of 100.kevpublic-exploitT1190T1499.004https://patchfirst.co/cve/CVE-2017-12240/CVE-2017-12240#kevThu, 03 Mar 2022 00:00:00 GMTCisco · IOS and IOS XE Software. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 13.8% (higher than 96.5% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1499.004 Application or System Exploitation. Priority 64.2 of 100.kevT1190T1059T1499.004https://patchfirst.co/cve/CVE-2017-6737/CVE-2017-6737#kevThu, 03 Mar 2022 00:00:00 GMTCisco · IOS and IOS XE Software. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 45.0% (higher than 98.8% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1499.004 Application or System Exploitation. Priority 63.9 of 100.kevT1190T1059T1499.004