{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: CVEs linked to T1499 Endpoint Denial of Service","home_page_url":"https://patchfirst.co/technique/T1499/","feed_url":"https://patchfirst.co/feed/technique/T1499.json","description":"New and newly exploited CVEs that lead to ATT&CK T1499 Endpoint Denial of Service, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-28318#kev","url":"https://patchfirst.co/cve/CVE-2026-28318/","title":"[KEV] CVE-2026-28318: SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability","content_text":"SolarWinds · Serv-U. In CISA KEV since 2026-06-05. ENISA EUVD lists it as exploited. EPSS 43.7% (higher than 98.7% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 73.0 of 100.","summary":"SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability","date_published":"2026-06-05T00:00:00.000Z","date_modified":"2026-10-21T11:17:07.000Z","tags":["kev","public-exploit","T1190","T1499"],"_patchfirst":{"reason":"kev","priority":73,"kev":{"dateAdded":"2026-06-05","ransomware":false},"epss":{"score":0.43651,"percentile":0.9874},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"SolarWinds","product":"Serv-U","techniqueIds":["T1190","T1499"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-45498#kev","url":"https://patchfirst.co/cve/CVE-2026-45498/","title":"[KEV] CVE-2026-45498: Microsoft Defender Denial of Service Vulnerability","content_text":"Microsoft · Defender. In CISA KEV since 2026-05-20. ENISA EUVD lists it as exploited. EPSS 63.1% (higher than 99.2% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 73.1 of 100.","summary":"Microsoft Defender Denial of Service Vulnerability","date_published":"2026-05-20T00:00:00.000Z","date_modified":"2026-07-23T12:10:00.000Z","tags":["kev","public-exploit","T1190","T1499"],"_patchfirst":{"reason":"kev","priority":73.1,"kev":{"dateAdded":"2026-05-20","ransomware":false},"epss":{"score":0.63076,"percentile":0.99201},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Defender","techniqueIds":["T1190","T1499"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2013-3918#kev","url":"https://patchfirst.co/cve/CVE-2013-3918/","title":"[KEV] CVE-2013-3918: Microsoft Windows Out-of-Bounds Write Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2025-10-06. ENISA EUVD lists it as exploited. EPSS 73.7% (higher than 99.47% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution; T1499 Endpoint Denial of Service. Named in 1 threat report. Priority 72.9 of 100.","summary":"Microsoft Windows Out-of-Bounds Write Vulnerability","date_published":"2025-10-06T00:00:00.000Z","date_modified":"2026-06-16T23:56:01.000Z","tags":["kev","public-exploit","T1189","T1203","T1499"],"_patchfirst":{"reason":"kev","priority":72.9,"kev":{"dateAdded":"2025-10-06","ransomware":false},"epss":{"score":0.73693,"percentile":0.99472},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1189","T1203","T1499"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-7775#kev","url":"https://patchfirst.co/cve/CVE-2025-7775/","title":"[KEV] CVE-2025-7775: Citrix NetScaler Memory Overflow Vulnerability","content_text":"Citrix · NetScaler. In CISA KEV since 2025-08-26. ENISA EUVD lists it as exploited. EPSS 20.7% (higher than 97.5% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1499 Endpoint Denial of Service. Priority 69.4 of 100.","summary":"Citrix NetScaler Memory Overflow Vulnerability","date_published":"2025-08-26T00:00:00.000Z","date_modified":"2026-06-17T10:05:38.000Z","tags":["kev","public-exploit","T1190","T1059","T1499"],"_patchfirst":{"reason":"kev","priority":69.4,"kev":{"dateAdded":"2025-08-26","ransomware":false},"epss":{"score":0.2067,"percentile":0.97524},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Citrix","product":"NetScaler","techniqueIds":["T1190","T1059","T1499"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-54085#kev","url":"https://patchfirst.co/cve/CVE-2024-54085/","title":"[KEV] CVE-2024-54085: AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability","content_text":"AMI · MegaRAC SPx. In CISA KEV since 2025-06-25. ENISA EUVD lists it as exploited. EPSS 60.7% (higher than 99.15% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1210 Exploitation of Remote Services; T1495 Firmware Corruption; T1499 Endpoint Denial of Service; T1608.001 Upload Malware. Priority 69.7 of 100.","summary":"AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability","date_published":"2025-06-25T00:00:00.000Z","date_modified":"2026-06-17T08:09:44.000Z","tags":["kev","public-exploit","T1068","T1210","T1495","T1499","T1608.001"],"_patchfirst":{"reason":"kev","priority":69.7,"kev":{"dateAdded":"2025-06-25","ransomware":false},"epss":{"score":0.60747,"percentile":0.99147},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"AMI","product":"MegaRAC SPx","techniqueIds":["T1068","T1210","T1495","T1499","T1608.001"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-42599#kev","url":"https://patchfirst.co/cve/CVE-2025-42599/","title":"[KEV] CVE-2025-42599: Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability","content_text":"Qualitia · Active! Mail. In CISA KEV since 2025-04-28. ENISA EUVD lists it as exploited. EPSS 3.4% (higher than 88.7% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1588.006 Vulnerabilities; T1059 Command and Scripting Interpreter; T1499 Endpoint Denial of Service. Priority 62.6 of 100.","summary":"Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability","date_published":"2025-04-28T00:00:00.000Z","date_modified":"2026-09-24T13:10:00.000Z","tags":["kev","T1190","T1588.006","T1059","T1499"],"_patchfirst":{"reason":"kev","priority":62.6,"kev":{"dateAdded":"2025-04-28","ransomware":false},"epss":{"score":0.03355,"percentile":0.88687},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Qualitia","product":"Active! Mail","techniqueIds":["T1190","T1588.006","T1059","T1499"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-6549#kev","url":"https://patchfirst.co/cve/CVE-2023-6549/","title":"[KEV] CVE-2023-6549: Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","content_text":"Citrix · NetScaler ADC and NetScaler Gateway. In CISA KEV since 2024-01-17. ENISA EUVD lists it as exploited. EPSS 57.6% (higher than 99.08% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1574 Hijack Execution Flow; T1499 Endpoint Denial of Service. Priority 68.1 of 100.","summary":"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","date_published":"2024-01-17T00:00:00.000Z","date_modified":"2026-06-17T06:50:58.000Z","tags":["kev","public-exploit","T1574","T1499"],"_patchfirst":{"reason":"kev","priority":68.1,"kev":{"dateAdded":"2024-01-17","ransomware":false},"epss":{"score":0.57633,"percentile":0.99082},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Citrix","product":"NetScaler ADC and NetScaler Gateway","techniqueIds":["T1574","T1499"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-44487#kev","url":"https://patchfirst.co/cve/CVE-2023-44487/","title":"[KEV] CVE-2023-44487: HTTP/2 Rapid Reset Attack Vulnerability","content_text":"IETF · HTTP/2. In CISA KEV since 2023-10-10. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 68.2 of 100.","summary":"HTTP/2 Rapid Reset Attack Vulnerability","date_published":"2023-10-10T00:00:00.000Z","date_modified":"2026-08-11T19:37:30.000Z","tags":["kev","public-exploit","T1190","T1499"],"_patchfirst":{"reason":"kev","priority":68.2,"kev":{"dateAdded":"2023-10-10","ransomware":false},"epss":{"score":0.99999,"percentile":0.99998},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"IETF","product":"HTTP/2","techniqueIds":["T1190","T1499"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-20109#kev","url":"https://patchfirst.co/cve/CVE-2023-20109/","title":"[KEV] CVE-2023-20109: Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability","content_text":"Cisco · IOS and IOS XE. In CISA KEV since 2023-10-10. ENISA EUVD lists it as exploited. EPSS 2.5% (higher than 84.7% of CVEs). CVSS 6.6 MEDIUM. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter; T1499 Endpoint Denial of Service. Priority 59.6 of 100.","summary":"Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability","date_published":"2023-10-10T00:00:00.000Z","date_modified":"2026-06-17T05:29:29.000Z","tags":["kev","T1078","T1059","T1499"],"_patchfirst":{"reason":"kev","priority":59.6,"kev":{"dateAdded":"2023-10-10","ransomware":false},"epss":{"score":0.02504,"percentile":0.84708},"cvss":{"score":6.6,"severity":"MEDIUM","version":"3.1"},"vendor":"Cisco","product":"IOS and IOS XE","techniqueIds":["T1078","T1059","T1499"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-38180#kev","url":"https://patchfirst.co/cve/CVE-2023-38180/","title":"[KEV] CVE-2023-38180: Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability","content_text":"Microsoft · .NET Core and Visual Studio. In CISA KEV since 2023-08-09. ENISA EUVD lists it as exploited. EPSS 14.1% (higher than 96.6% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 62.6 of 100.","summary":"Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability","date_published":"2023-08-09T00:00:00.000Z","date_modified":"2026-08-10T16:18:37.000Z","tags":["kev","T1190","T1499"],"_patchfirst":{"reason":"kev","priority":62.6,"kev":{"dateAdded":"2023-08-09","ransomware":false},"epss":{"score":0.14127,"percentile":0.9657},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":".NET Core and Visual Studio","techniqueIds":["T1190","T1499"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2004-1464#kev","url":"https://patchfirst.co/cve/CVE-2004-1464/","title":"[KEV] CVE-2004-1464: Cisco IOS Denial-of-Service Vulnerability","content_text":"Cisco · IOS. In CISA KEV since 2023-05-19. ENISA EUVD lists it as exploited. EPSS 4.8% (higher than 92% of CVEs). CVSS 5.9 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 60.5 of 100.","summary":"Cisco IOS Denial-of-Service Vulnerability","date_published":"2023-05-19T00:00:00.000Z","date_modified":"2026-06-16T22:07:45.000Z","tags":["kev","T1190","T1499"],"_patchfirst":{"reason":"kev","priority":60.5,"kev":{"dateAdded":"2023-05-19","ransomware":false},"epss":{"score":0.0484,"percentile":0.91996},"cvss":{"score":5.9,"severity":"MEDIUM","version":"3.1"},"vendor":"Cisco","product":"IOS","techniqueIds":["T1190","T1499"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2011-2462#kev","url":"https://patchfirst.co/cve/CVE-2011-2462/","title":"[KEV] CVE-2011-2462: Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability","content_text":"Adobe · Reader and Acrobat. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 88.6% (higher than 99.77% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1059 Command and Scripting Interpreter; T1499 Endpoint Denial of Service. Named in 1 threat report. Priority 58.7 of 100.","summary":"Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability","date_published":"2022-06-08T00:00:00.000Z","date_modified":"2026-06-16T23:31:23.000Z","tags":["kev","public-exploit","T1059","T1499"],"_patchfirst":{"reason":"kev","priority":58.7,"kev":{"dateAdded":"2022-06-08","ransomware":false},"epss":{"score":0.88581,"percentile":0.99773},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Adobe","product":"Reader and Acrobat","techniqueIds":["T1059","T1499"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2013-1690#kev","url":"https://patchfirst.co/cve/CVE-2013-1690/","title":"[KEV] CVE-2013-1690: Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","content_text":"Mozilla · Firefox and Thunderbird. In CISA KEV since 2022-03-28. ENISA EUVD lists it as exploited. EPSS 69.0% (higher than 99.35% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter; T1499 Endpoint Denial of Service. Priority 69.0 of 100.","summary":"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","date_published":"2022-03-28T00:00:00.000Z","date_modified":"2026-06-16T23:51:55.000Z","tags":["kev","public-exploit","T1189","T1059","T1499"],"_patchfirst":{"reason":"kev","priority":69,"kev":{"dateAdded":"2022-03-28","ransomware":false},"epss":{"score":0.69021,"percentile":0.9935},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Mozilla","product":"Firefox and Thunderbird","techniqueIds":["T1189","T1059","T1499"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2018-0151#kev","url":"https://patchfirst.co/cve/CVE-2018-0151/","title":"[KEV] CVE-2018-0151: Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability","content_text":"Cisco · IOS and IOS XE Software. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 14.2% (higher than 96.6% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1499 Endpoint Denial of Service. Priority 64.2 of 100.","summary":"Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability","date_published":"2022-03-03T00:00:00.000Z","date_modified":"2026-06-17T01:29:56.000Z","tags":["kev","T1190","T1059","T1499"],"_patchfirst":{"reason":"kev","priority":64.2,"kev":{"dateAdded":"2022-03-03","ransomware":false},"epss":{"score":0.14197,"percentile":0.9658},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Cisco","product":"IOS and IOS XE Software","techniqueIds":["T1190","T1059","T1499"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2017-6738#kev","url":"https://patchfirst.co/cve/CVE-2017-6738/","title":"[KEV] CVE-2017-6738: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","content_text":"Cisco · IOS and IOS XE Software. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 10.9% (higher than 95.9% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1499 Endpoint Denial of Service. Priority 63.3 of 100.","summary":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","date_published":"2022-03-03T00:00:00.000Z","date_modified":"2026-06-17T01:22:55.000Z","tags":["kev","T1190","T1059","T1499"],"_patchfirst":{"reason":"kev","priority":63.3,"kev":{"dateAdded":"2022-03-03","ransomware":false},"epss":{"score":0.10855,"percentile":0.95852},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Cisco","product":"IOS and IOS XE Software","techniqueIds":["T1190","T1059","T1499"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2018-0154#kev","url":"https://patchfirst.co/cve/CVE-2018-0154/","title":"[KEV] CVE-2018-0154: Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability","content_text":"Cisco · IOS Software. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 7.1% (higher than 94.2% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 62.1 of 100.","summary":"Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability","date_published":"2022-03-03T00:00:00.000Z","date_modified":"2026-06-17T01:29:57.000Z","tags":["kev","T1190","T1499"],"_patchfirst":{"reason":"kev","priority":62.1,"kev":{"dateAdded":"2022-03-03","ransomware":false},"epss":{"score":0.0707,"percentile":0.94206},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Cisco","product":"IOS Software","techniqueIds":["T1190","T1499"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2017-6627#kev","url":"https://patchfirst.co/cve/CVE-2017-6627/","title":"[KEV] CVE-2017-6627: Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability","content_text":"Cisco · IOS and IOS XE Software. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 6.2% (higher than 93.5% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 61.9 of 100.","summary":"Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability","date_published":"2022-03-03T00:00:00.000Z","date_modified":"2026-06-17T01:22:40.000Z","tags":["kev","T1190","T1499"],"_patchfirst":{"reason":"kev","priority":61.9,"kev":{"dateAdded":"2022-03-03","ransomware":false},"epss":{"score":0.06158,"percentile":0.93469},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Cisco","product":"IOS and IOS XE Software","techniqueIds":["T1190","T1499"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2018-0175#kev","url":"https://patchfirst.co/cve/CVE-2018-0175/","title":"[KEV] CVE-2018-0175: Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability","content_text":"Cisco · IOS, XR, and XE Software. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 3.5% (higher than 89.1% of CVEs). CVSS 8.0 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1499 Endpoint Denial of Service. Priority 61.4 of 100.","summary":"Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability","date_published":"2022-03-03T00:00:00.000Z","date_modified":"2026-06-17T01:30:00.000Z","tags":["kev","T1068","T1499"],"_patchfirst":{"reason":"kev","priority":61.4,"kev":{"dateAdded":"2022-03-03","ransomware":false},"epss":{"score":0.03478,"percentile":0.89086},"cvss":{"score":8,"severity":"HIGH","version":"3.1"},"vendor":"Cisco","product":"IOS, XR, and XE Software","techniqueIds":["T1068","T1499"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2018-0179#kev","url":"https://patchfirst.co/cve/CVE-2018-0179/","title":"[KEV] CVE-2018-0179: Cisco IOS Software Denial-of-Service Vulnerability","content_text":"Cisco · IOS Software. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 4.9% (higher than 92.1% of CVEs). CVSS 5.9 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 60.6 of 100.","summary":"Cisco IOS Software Denial-of-Service Vulnerability","date_published":"2022-03-03T00:00:00.000Z","date_modified":"2026-06-17T01:30:01.000Z","tags":["kev","T1190","T1499"],"_patchfirst":{"reason":"kev","priority":60.6,"kev":{"dateAdded":"2022-03-03","ransomware":false},"epss":{"score":0.04935,"percentile":0.9213},"cvss":{"score":5.9,"severity":"MEDIUM","version":"3.1"},"vendor":"Cisco","product":"IOS Software","techniqueIds":["T1190","T1499"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-35394#kev","url":"https://patchfirst.co/cve/CVE-2021-35394/","title":"[KEV] CVE-2021-35394: Realtek Jungle SDK Remote Code Execution Vulnerability","content_text":"Realtek · Jungle Software Development Kit (SDK). In CISA KEV since 2021-12-10. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.96% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1071.001 Web Protocols; T1105 Ingress Tool Transfer; T1496 Resource Hijacking; T1499 Endpoint Denial of Service; +1 more. Priority 69.9 of 100.","summary":"Realtek Jungle SDK Remote Code Execution Vulnerability","date_published":"2021-12-10T00:00:00.000Z","date_modified":"2026-06-17T03:57:29.000Z","tags":["kev","public-exploit","T1190","T1059","T1071.001","T1105","T1496","T1499","T1569.002"],"_patchfirst":{"reason":"kev","priority":69.9,"kev":{"dateAdded":"2021-12-10","ransomware":false},"epss":{"score":0.99877,"percentile":0.99964},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Realtek","product":"Jungle Software Development Kit (SDK)","techniqueIds":["T1190","T1059","T1071.001","T1105","T1496","T1499","T1569.002"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2020-5735#kev","url":"https://patchfirst.co/cve/CVE-2020-5735/","title":"[KEV] CVE-2020-5735: Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability","content_text":"Amcrest · Cameras and Network Video Recorder (NVR). In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 36.2% (higher than 98.5% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1574 Hijack Execution Flow; T1499 Endpoint Denial of Service. Priority 68.9 of 100.","summary":"Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T03:22:08.000Z","tags":["kev","public-exploit","T1574","T1499"],"_patchfirst":{"reason":"kev","priority":68.9,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.36217,"percentile":0.98476},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Amcrest","product":"Cameras and Network Video Recorder (NVR)","techniqueIds":["T1574","T1499"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2020-3569#kev","url":"https://patchfirst.co/cve/CVE-2020-3569/","title":"[KEV] CVE-2020-3569: Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability","content_text":"Cisco · IOS XR. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 3.3% (higher than 88.6% of CVEs). CVSS 8.6 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 61.7 of 100.","summary":"Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T03:18:37.000Z","tags":["kev","T1190","T1499"],"_patchfirst":{"reason":"kev","priority":61.7,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.0332,"percentile":0.88572},"cvss":{"score":8.6,"severity":"HIGH","version":"3.1"},"vendor":"Cisco","product":"IOS XR","techniqueIds":["T1190","T1499"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-1906#kev","url":"https://patchfirst.co/cve/CVE-2021-1906/","title":"[KEV] CVE-2021-1906: Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability","content_text":"Qualcomm · Multiple Chipsets. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 0.5% (higher than 44.1% of CVEs). CVSS 5.5 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1499 Endpoint Denial of Service. Priority 50.7 of 100.","summary":"Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T03:32:48.000Z","tags":["kev","T1068","T1499"],"_patchfirst":{"reason":"kev","priority":50.7,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.0052,"percentile":0.44148},"cvss":{"score":5.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Qualcomm","product":"Multiple Chipsets","techniqueIds":["T1068","T1499"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2020-14508","url":"https://patchfirst.co/cve/CVE-2020-14508/","title":"CVE-2020-14508: OFF-BY-ONE ERROR CWE-193","content_text":"Secomea · GateManager. Not in CISA KEV. EPSS 2.0% (higher than 80.9% of CVEs). CVSS 8.1 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1499 Endpoint Denial of Service. Priority 21.8 of 100.","summary":"OFF-BY-ONE ERROR CWE-193","date_published":"2020-08-25T00:00:00.000Z","date_modified":"2024-09-16T16:33:48.000Z","tags":["T1190","T1059","T1499"],"_patchfirst":{"reason":"published","priority":21.8,"kev":null,"epss":{"score":0.02017,"percentile":0.80894},"cvss":{"score":8.1,"severity":"HIGH","version":"3.1"},"vendor":"Secomea","product":"GateManager","techniqueIds":["T1190","T1059","T1499"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-3306","url":"https://patchfirst.co/cve/CVE-2020-3306/","title":"CVE-2020-3306: Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DHCP Denial of Service Vulnerability","content_text":"Cisco · Cisco Adaptive Security Appliance (ASA) Software. Not in CISA KEV. EPSS 1.2% (higher than 69.3% of CVEs). CVSS 6.8 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 18.6 of 100.","summary":"Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DHCP Denial of Service Vulnerability","date_published":"2020-05-06T00:00:00.000Z","date_modified":"2024-11-15T17:22:34.000Z","tags":["T1190","T1499"],"_patchfirst":{"reason":"published","priority":18.6,"kev":null,"epss":{"score":0.01245,"percentile":0.69251},"cvss":{"score":6.8,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Adaptive Security Appliance (ASA) Software","techniqueIds":["T1190","T1499"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-6986","url":"https://patchfirst.co/cve/CVE-2020-6986/","title":"CVE-2020-6986: In all versions of Omron PLC CJ Series, an attacker can send a series of specific data packets within a short period…","content_text":"Not in CISA KEV. EPSS 1.6% (higher than 75.7% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1499 Endpoint Denial of Service. Priority 20.4 of 100.","summary":"In all versions of Omron PLC CJ Series, an attacker can send a series of specific data packets within a short period…","date_published":"2020-03-05T00:00:00.000Z","date_modified":"2026-06-02T19:52:04.000Z","tags":["T1499"],"_patchfirst":{"reason":"published","priority":20.4,"kev":null,"epss":{"score":0.01592,"percentile":0.75668},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":null,"product":null,"techniqueIds":["T1499"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-3120","url":"https://patchfirst.co/cve/CVE-2020-3120/","title":"CVE-2020-3120: Cisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability","content_text":"Cisco · Cisco IOS XR Software. Not in CISA KEV. EPSS 1.6% (higher than 76.3% of CVEs). CVSS 7.4 HIGH. Public exploit code exists. ATT&CK: T1499 Endpoint Denial of Service. Priority 25.4 of 100.","summary":"Cisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability","date_published":"2020-02-05T00:00:00.000Z","date_modified":"2024-11-15T17:42:14.000Z","tags":["public-exploit","T1499"],"_patchfirst":{"reason":"published","priority":25.4,"kev":null,"epss":{"score":0.01639,"percentile":0.76327},"cvss":{"score":7.4,"severity":"HIGH","version":"3.0"},"vendor":"Cisco","product":"Cisco IOS XR Software","techniqueIds":["T1499"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2019-15956","url":"https://patchfirst.co/cve/CVE-2019-15956/","title":"CVE-2019-15956: Cisco Web Security Appliance Unauthorized Device Reset Vulnerability","content_text":"Cisco · Cisco Web Security Appliance (WSA). Not in CISA KEV. EPSS 1.0% (higher than 62.2% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1078 Valid Accounts; T1190 Exploit Public-Facing Application; T1098 Account Manipulation; T1499 Endpoint Denial of Service. Priority 18.6 of 100.","summary":"Cisco Web Security Appliance Unauthorized Device Reset Vulnerability","date_published":"2019-11-26T00:00:00.000Z","date_modified":"2024-11-20T17:04:44.000Z","tags":["T1078","T1190","T1098","T1499"],"_patchfirst":{"reason":"published","priority":18.6,"kev":null,"epss":{"score":0.00981,"percentile":0.6223},"cvss":{"score":8.8,"severity":"HIGH","version":"3.0"},"vendor":"Cisco","product":"Cisco Web Security Appliance (WSA)","techniqueIds":["T1078","T1190","T1098","T1499"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-13555","url":"https://patchfirst.co/cve/CVE-2019-13555/","title":"CVE-2019-13555: In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU…","content_text":"Not in CISA KEV. EPSS 1.5% (higher than 74.6% of CVEs). ATT&CK: T1499 Endpoint Denial of Service. Priority 14.9 of 100.","summary":"In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU…","date_published":"2019-11-13T00:00:00.000Z","date_modified":"2024-08-04T23:57:39.000Z","tags":["T1499"],"_patchfirst":{"reason":"published","priority":14.9,"kev":null,"epss":{"score":0.01521,"percentile":0.74571},"cvss":null,"vendor":null,"product":null,"techniqueIds":["T1499"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-15462","url":"https://patchfirst.co/cve/CVE-2018-15462/","title":"CVE-2018-15462: Cisco Firepower Threat Defense Software TCP Ingress Handler Denial of Service Vulnerability","content_text":"Cisco · Cisco Firepower Threat Defense Software. Not in CISA KEV. EPSS 2.1% (higher than 81.4% of CVEs). CVSS 8.6 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 22.3 of 100.","summary":"Cisco Firepower Threat Defense Software TCP Ingress Handler Denial of Service Vulnerability","date_published":"2019-05-03T00:00:00.000Z","date_modified":"2024-11-19T19:10:03.000Z","tags":["T1190","T1499"],"_patchfirst":{"reason":"published","priority":22.3,"kev":null,"epss":{"score":0.02073,"percentile":0.81437},"cvss":{"score":8.6,"severity":"HIGH","version":"3.0"},"vendor":"Cisco","product":"Cisco Firepower Threat Defense Software","techniqueIds":["T1190","T1499"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-1704","url":"https://patchfirst.co/cve/CVE-2019-1704/","title":"CVE-2019-1704: Cisco Firepower Threat Defense Software SMB Protocol Preprocessor Detection Engine Denial of Service Vulnerabilities","content_text":"Cisco · Cisco Firepower Threat Defense Software. Not in CISA KEV. EPSS 2.3% (higher than 82.9% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 21.8 of 100.","summary":"Cisco Firepower Threat Defense Software SMB Protocol Preprocessor Detection Engine Denial of Service Vulnerabilities","date_published":"2019-05-03T00:00:00.000Z","date_modified":"2024-11-19T19:09:18.000Z","tags":["T1190","T1499"],"_patchfirst":{"reason":"published","priority":21.8,"kev":null,"epss":{"score":0.02254,"percentile":0.82914},"cvss":{"score":7.5,"severity":"HIGH","version":"3.0"},"vendor":"Cisco","product":"Cisco Firepower Threat Defense Software","techniqueIds":["T1190","T1499"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-19010","url":"https://patchfirst.co/cve/CVE-2018-19010/","title":"CVE-2018-19010: Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer…","content_text":"ICS-CERT · Dräger Infinity Delta. Not in CISA KEV. EPSS 0.8% (higher than 55.3% of CVEs). ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 11.1 of 100.","summary":"Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer…","date_published":"2019-01-28T00:00:00.000Z","date_modified":"2024-09-16T17:32:40.000Z","tags":["T1190","T1499"],"_patchfirst":{"reason":"published","priority":11.1,"kev":null,"epss":{"score":0.00762,"percentile":0.55319},"cvss":null,"vendor":"ICS-CERT","product":"Dräger Infinity Delta","techniqueIds":["T1190","T1499"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-15772","url":"https://patchfirst.co/cve/CVE-2018-15772/","title":"CVE-2018-15772: Dell EMC RecoverPoint Uncontrolled Resource Consumption Vulnerability","content_text":"Dell EMC · Dell EMC RecoverPoint. Not in CISA KEV. EPSS 0.4% (higher than 35.7% of CVEs). ATT&CK: T1499 Endpoint Denial of Service. Priority 7.1 of 100.","summary":"Dell EMC RecoverPoint Uncontrolled Resource Consumption Vulnerability","date_published":"2018-11-13T00:00:00.000Z","date_modified":"2024-09-17T01:10:33.000Z","tags":["T1499"],"_patchfirst":{"reason":"published","priority":7.1,"kev":null,"epss":{"score":0.00414,"percentile":0.35657},"cvss":null,"vendor":"Dell EMC","product":"Dell EMC RecoverPoint","techniqueIds":["T1499"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}