{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: CVEs linked to T1553 Subvert Trust Controls","home_page_url":"https://patchfirst.co/technique/T1553/","feed_url":"https://patchfirst.co/feed/technique/T1553.json","description":"New and newly exploited CVEs that lead to ATT&CK T1553 Subvert Trust Controls, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-21510#kev","url":"https://patchfirst.co/cve/CVE-2026-21510/","title":"[KEV] CVE-2026-21510: Microsoft Windows Shell Protection Mechanism Failure Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2026-02-10. ENISA EUVD lists it as exploited. EPSS 61.2% (higher than 99.16% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1211 Exploitation for Stealth; T1553 Subvert Trust Controls. Priority 74.0 of 100.","summary":"Microsoft Windows Shell Protection Mechanism Failure Vulnerability","date_published":"2026-02-10T00:00:00.000Z","date_modified":"2026-06-17T10:18:45.000Z","tags":["kev","public-exploit","T1211","T1553"],"_patchfirst":{"reason":"kev","priority":74,"kev":{"dateAdded":"2026-02-10","ransomware":false},"epss":{"score":0.61238,"percentile":0.9916},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1211","T1553"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-21513#kev","url":"https://patchfirst.co/cve/CVE-2026-21513/","title":"[KEV] CVE-2026-21513: Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2026-02-10. ENISA EUVD lists it as exploited. EPSS 15.9% (higher than 96.9% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1553 Subvert Trust Controls. Priority 68.5 of 100.","summary":"Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability","date_published":"2026-02-10T00:00:00.000Z","date_modified":"2026-06-17T10:18:45.000Z","tags":["kev","T1189","T1553"],"_patchfirst":{"reason":"kev","priority":68.5,"kev":{"dateAdded":"2026-02-10","ransomware":false},"epss":{"score":0.15852,"percentile":0.96879},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1189","T1553"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2020-1464#kev","url":"https://patchfirst.co/cve/CVE-2020-1464/","title":"[KEV] CVE-2020-1464: Microsoft Windows Spoofing Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 38.9% (higher than 98.6% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1211 Exploitation for Stealth; T1553 Subvert Trust Controls. Priority 68.2 of 100.","summary":"Microsoft Windows Spoofing Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T03:01:28.000Z","tags":["kev","public-exploit","T1211","T1553"],"_patchfirst":{"reason":"kev","priority":68.2,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.38946,"percentile":0.98588},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1211","T1553"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2019-3762","url":"https://patchfirst.co/cve/CVE-2019-3762/","title":"CVE-2019-3762: Data Protection Central versions 1.0, 1.0.1, 18.1, 18.2, and 19.1 contains an Improper Certificate Chain of Trust…","content_text":"Dell · Data Protection Central. Not in CISA KEV. EPSS 0.6% (higher than 51% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1588.004 Digital Certificates; T1553 Subvert Trust Controls. Priority 15.5 of 100.","summary":"Data Protection Central versions 1.0, 1.0.1, 18.1, 18.2, and 19.1 contains an Improper Certificate Chain of Trust…","date_published":"2020-03-18T00:00:00.000Z","date_modified":"2024-09-16T23:15:44.000Z","tags":["T1588.004","T1553"],"_patchfirst":{"reason":"published","priority":15.5,"kev":null,"epss":{"score":0.00648,"percentile":0.51018},"cvss":{"score":7.5,"severity":"HIGH","version":"3.0"},"vendor":"Dell","product":"Data Protection Central","techniqueIds":["T1588.004","T1553"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}