{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: CVEs linked to T1566 Phishing","home_page_url":"https://patchfirst.co/technique/T1566/","feed_url":"https://patchfirst.co/feed/technique/T1566.json","description":"New and newly exploited CVEs that lead to ATT&CK T1566 Phishing, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2025-27915#kev","url":"https://patchfirst.co/cve/CVE-2025-27915/","title":"[KEV] CVE-2025-27915: Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability","content_text":"Synacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2025-10-07. ENISA EUVD lists it as exploited. EPSS 4.1% (higher than 90.7% of CVEs). CVSS 5.4 MEDIUM. Public exploit code exists. ATT&CK: T1566 Phishing; T1059 Command and Scripting Interpreter. Priority 64.9 of 100.","summary":"Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability","date_published":"2025-10-07T00:00:00.000Z","date_modified":"2026-06-17T09:04:22.000Z","tags":["kev","public-exploit","T1566","T1059"],"_patchfirst":{"reason":"kev","priority":64.9,"kev":{"dateAdded":"2025-10-07","ransomware":false},"epss":{"score":0.04064,"percentile":0.90652},"cvss":{"score":5.4,"severity":"MEDIUM","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","techniqueIds":["T1566","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-11182#kev","url":"https://patchfirst.co/cve/CVE-2024-11182/","title":"[KEV] CVE-2024-11182: MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability","content_text":"MDaemon · Email Server. In CISA KEV since 2025-05-19. ENISA EUVD lists it as exploited. EPSS 33.3% (higher than 98.4% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1566 Phishing; T1059 Command and Scripting Interpreter; T1567 Exfiltration Over Web Service. Priority 61.9 of 100.","summary":"MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability","date_published":"2025-05-19T00:00:00.000Z","date_modified":"2026-06-17T06:57:13.000Z","tags":["kev","T1566","T1059","T1567"],"_patchfirst":{"reason":"kev","priority":61.9,"kev":{"dateAdded":"2025-05-19","ransomware":false},"epss":{"score":0.33259,"percentile":0.98367},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"MDaemon","product":"Email Server","techniqueIds":["T1566","T1059","T1567"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2025-24054#kev","url":"https://patchfirst.co/cve/CVE-2025-24054/","title":"[KEV] CVE-2025-24054: Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2025-04-17. ENISA EUVD lists it as exploited. EPSS 62.3% (higher than 99.18% of CVEs). CVSS 5.4 MEDIUM. Public exploit code exists. ATT&CK: T1566 Phishing; T1555 Credentials from Password Stores. Priority 66.6 of 100.","summary":"Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability","date_published":"2025-04-17T00:00:00.000Z","date_modified":"2026-06-17T08:57:57.000Z","tags":["kev","public-exploit","T1566","T1555"],"_patchfirst":{"reason":"kev","priority":66.6,"kev":{"dateAdded":"2025-04-17","ransomware":false},"epss":{"score":0.6227,"percentile":0.99181},"cvss":{"score":5.4,"severity":"MEDIUM","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1566","T1555"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-43451#kev","url":"https://patchfirst.co/cve/CVE-2024-43451/","title":"[KEV] CVE-2024-43451: Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2024-11-12. ENISA EUVD lists it as exploited. EPSS 84.3% (higher than 99.7% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. ATT&CK: T1566 Phishing. Named in 1 threat report. Priority 81.4 of 100.","summary":"Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability","date_published":"2024-11-12T00:00:00.000Z","date_modified":"2026-06-17T07:51:04.000Z","tags":["kev","public-exploit","T1566"],"_patchfirst":{"reason":"kev","priority":81.4,"kev":{"dateAdded":"2024-11-12","ransomware":false},"epss":{"score":0.84266,"percentile":0.99697},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1566"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-36884#kev","url":"https://patchfirst.co/cve/CVE-2023-36884/","title":"[KEV] CVE-2023-36884: Microsoft Windows Search Remote Code Execution Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2023-07-17, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.4% (higher than 99.94% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1566 Phishing; T1204.002 Malicious File; T1005 Data from Local System; T1486 Data Encrypted for Impact; T1489 Service Stop; T1490 Inhibit System Recovery; +1 more. Priority 78.2 of 100.","summary":"Microsoft Windows Search Remote Code Execution Vulnerability","date_published":"2023-07-17T00:00:00.000Z","date_modified":"2026-08-10T16:18:30.000Z","tags":["kev","ransomware","public-exploit","T1566","T1204.002","T1005","T1486","T1489","T1490","T1553.005"],"_patchfirst":{"reason":"kev","priority":78.2,"kev":{"dateAdded":"2023-07-17","ransomware":true},"epss":{"score":0.99439,"percentile":0.99942},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1566","T1204.002","T1005","T1486","T1489","T1490","T1553.005"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-41128","url":"https://patchfirst.co/cve/CVE-2022-41128/","title":"CVE-2022-41128: Microsoft Windows Scripting Languages Remote Code Execution Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2022-11-08. ENISA EUVD lists it as exploited. EPSS 24.6% (higher than 97.9% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1566 Phishing; T1203 Exploitation for Client Execution; T1070 Indicator Removal. Priority 63.7 of 100.","summary":"Microsoft Windows Scripting Languages Remote Code Execution Vulnerability","date_published":"2022-11-09T00:00:00.000Z","date_modified":"2026-08-10T16:18:24.000Z","tags":["kev","T1566","T1203","T1070"],"_patchfirst":{"reason":"published","priority":63.7,"kev":{"dateAdded":"2022-11-08","ransomware":false},"epss":{"score":0.24623,"percentile":0.97883},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1566","T1203","T1070"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2022-34713#kev","url":"https://patchfirst.co/cve/CVE-2022-34713/","title":"[KEV] CVE-2022-34713: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2022-08-09. ENISA EUVD lists it as exploited. EPSS 67.8% (higher than 99.31% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1566 Phishing; T1204.002 Malicious File; T1059 Command and Scripting Interpreter. Priority 63.3 of 100.","summary":"Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability","date_published":"2022-08-09T00:00:00.000Z","date_modified":"2026-06-17T04:50:46.000Z","tags":["kev","T1566","T1204.002","T1059"],"_patchfirst":{"reason":"kev","priority":63.3,"kev":{"dateAdded":"2022-08-09","ransomware":false},"epss":{"score":0.67757,"percentile":0.99315},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1566","T1204.002","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-40449#kev","url":"https://patchfirst.co/cve/CVE-2021-40449/","title":"[KEV] CVE-2021-40449: Microsoft Windows Win32k Privilege Escalation Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2021-11-17, known ransomware use. ENISA EUVD lists it as exploited. EPSS 81.9% (higher than 99.65% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1566 Phishing; T1068 Exploitation for Privilege Escalation; T1016 System Network Configuration Discovery; T1027 Obfuscated Files or Information; T1059.003 Windows Command Shell; T1071.001 Web Protocols; +2 more. Priority 78.4 of 100.","summary":"Microsoft Windows Win32k Privilege Escalation Vulnerability","date_published":"2021-11-17T00:00:00.000Z","date_modified":"2026-06-17T04:06:56.000Z","tags":["kev","ransomware","public-exploit","T1566","T1068","T1016","T1027","T1059.003","T1071.001","T1082","T1573.001"],"_patchfirst":{"reason":"kev","priority":78.4,"kev":{"dateAdded":"2021-11-17","ransomware":true},"epss":{"score":0.81936,"percentile":0.9965},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1566","T1068","T1016","T1027","T1059.003","T1071.001","T1082","T1573.001"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2020-3440","url":"https://patchfirst.co/cve/CVE-2020-3440/","title":"CVE-2020-3440: Cisco Webex Meetings Desktop App for Windows Arbitrary File Overwrite Vulnerability","content_text":"Cisco · Cisco Webex Meetings. Not in CISA KEV. EPSS 2.6% (higher than 85.4% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1565.001 Stored Data Manipulation. Priority 23.0 of 100.","summary":"Cisco Webex Meetings Desktop App for Windows Arbitrary File Overwrite Vulnerability","date_published":"2020-08-26T00:00:00.000Z","date_modified":"2024-11-13T18:11:22.000Z","tags":["T1204.002","T1566","T1565.001"],"_patchfirst":{"reason":"published","priority":23,"kev":null,"epss":{"score":0.0262,"percentile":0.85439},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Webex Meetings","techniqueIds":["T1204.002","T1566","T1565.001"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-1569","url":"https://patchfirst.co/cve/CVE-2020-1569/","title":"CVE-2020-1569: Microsoft Edge Memory Corruption Vulnerability","content_text":"Microsoft · Microsoft Edge (EdgeHTML-based). Not in CISA KEV. EPSS 3.0% (higher than 87.3% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 23.6 of 100.","summary":"Microsoft Edge Memory Corruption Vulnerability","date_published":"2020-08-17T00:00:00.000Z","date_modified":"2024-08-04T06:39:10.000Z","tags":["T1204.002","T1566","T1499.004","T1574","T1005","T1136","T1485","T1565"],"_patchfirst":{"reason":"published","priority":23.6,"kev":null,"epss":{"score":0.02984,"percentile":0.87281},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Microsoft Edge (EdgeHTML-based)","techniqueIds":["T1204.002","T1566","T1499.004","T1574","T1005","T1136","T1485","T1565"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-1495","url":"https://patchfirst.co/cve/CVE-2020-1495/","title":"CVE-2020-1495: Microsoft Excel Remote Code Execution Vulnerability","content_text":"Microsoft · Microsoft SharePoint Server 2010 Service Pack 2. Not in CISA KEV. EPSS 4.2% (higher than 91% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 18.9 of 100.","summary":"Microsoft Excel Remote Code Execution Vulnerability","date_published":"2020-08-17T00:00:00.000Z","date_modified":"2024-08-04T06:39:10.000Z","tags":["T1204.002","T1566","T1499.004","T1574","T1005","T1136","T1485","T1565"],"_patchfirst":{"reason":"published","priority":18.9,"kev":null,"epss":{"score":0.04212,"percentile":0.90969},"cvss":null,"vendor":"Microsoft","product":"Microsoft SharePoint Server 2010 Service Pack 2","techniqueIds":["T1204.002","T1566","T1499.004","T1574","T1005","T1136","T1485","T1565"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-4068","url":"https://patchfirst.co/cve/CVE-2020-4068/","title":"CVE-2020-4068: Heap-based Buffer Overflow in APNSwift","content_text":"kylebrowning · APNSwift. Not in CISA KEV. EPSS 1.3% (higher than 70.7% of CVEs). CVSS 6.3 MEDIUM. ATT&CK: T1091 Replication Through Removable Media; T1133 External Remote Services; T1190 Exploit Public-Facing Application; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 18.6 of 100.","summary":"Heap-based Buffer Overflow in APNSwift","date_published":"2020-06-22T00:00:00.000Z","date_modified":"2024-08-04T07:52:20.000Z","tags":["T1091","T1133","T1190","T1566","T1499.004","T1574"],"_patchfirst":{"reason":"published","priority":18.6,"kev":null,"epss":{"score":0.01316,"percentile":0.70744},"cvss":{"score":6.3,"severity":"MEDIUM","version":"3.1"},"vendor":"kylebrowning","product":"APNSwift","techniqueIds":["T1091","T1133","T1190","T1566","T1499.004","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-3198","url":"https://patchfirst.co/cve/CVE-2020-3198/","title":"CVE-2020-3198: Cisco IOS Software for Cisco Industrial Routers Arbitrary Code Execution Vulnerabilities","content_text":"Cisco · Cisco IOS 12.2(60)EZ16. Not in CISA KEV. EPSS 4.6% (higher than 91.6% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1133 External Remote Services; T1190 Exploit Public-Facing Application; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 25.2 of 100.","summary":"Cisco IOS Software for Cisco Industrial Routers Arbitrary Code Execution Vulnerabilities","date_published":"2020-06-03T00:00:00.000Z","date_modified":"2024-11-15T17:13:29.000Z","tags":["T1133","T1190","T1566","T1499.004","T1574"],"_patchfirst":{"reason":"published","priority":25.2,"kev":null,"epss":{"score":0.04583,"percentile":0.91625},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.0"},"vendor":"Cisco","product":"Cisco IOS 12.2(60)EZ16","techniqueIds":["T1133","T1190","T1566","T1499.004","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-3322","url":"https://patchfirst.co/cve/CVE-2020-3322/","title":"CVE-2020-3322: Cisco Webex Network Recording Player and Cisco Webex Player Denial of Service Vulnerability","content_text":"Cisco · Cisco Webex Network Recording Player. Not in CISA KEV. EPSS 0.7% (higher than 51.5% of CVEs). CVSS 3.3 LOW. ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation. Priority 12.6 of 100.","summary":"Cisco Webex Network Recording Player and Cisco Webex Player Denial of Service Vulnerability","date_published":"2020-06-03T00:00:00.000Z","date_modified":"2024-11-15T17:20:07.000Z","tags":["T1204.002","T1566","T1499.004"],"_patchfirst":{"reason":"published","priority":12.6,"kev":null,"epss":{"score":0.00658,"percentile":0.51473},"cvss":{"score":3.3,"severity":"LOW","version":"3.1"},"vendor":"Cisco","product":"Cisco Webex Network Recording Player","techniqueIds":["T1204.002","T1566","T1499.004"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-15276","url":"https://patchfirst.co/cve/CVE-2019-15276/","title":"CVE-2019-15276: Cisco Wireless LAN Controller HTTP Parsing Engine Denial of Service Vulnerability","content_text":"Cisco · Cisco Wireless LAN Controller (WLC). Not in CISA KEV. EPSS 46.3% (higher than 98.8% of CVEs). CVSS 7.7 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1566 Phishing; T1499.004 Application or System Exploitation. Priority 30.2 of 100.","summary":"Cisco Wireless LAN Controller HTTP Parsing Engine Denial of Service Vulnerability","date_published":"2019-11-26T00:00:00.000Z","date_modified":"2024-11-21T19:05:20.000Z","tags":["public-exploit","T1190","T1566","T1499.004"],"_patchfirst":{"reason":"published","priority":30.2,"kev":null,"epss":{"score":0.46305,"percentile":0.98815},"cvss":{"score":7.7,"severity":"HIGH","version":"3.0"},"vendor":"Cisco","product":"Cisco Wireless LAN Controller (WLC)","techniqueIds":["T1190","T1566","T1499.004"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2019-1915","url":"https://patchfirst.co/cve/CVE-2019-1915/","title":"CVE-2019-1915: Multiple Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability","content_text":"Cisco · Cisco Unified Communications Manager. Not in CISA KEV. EPSS 0.7% (higher than 52% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1204.002 Malicious File; T1566 Phishing; T1068 Exploitation for Privilege Escalation; T1098 Account Manipulation. Priority 14.9 of 100.","summary":"Multiple Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability","date_published":"2019-10-02T00:00:00.000Z","date_modified":"2024-11-21T19:10:23.000Z","tags":["T1189","T1204.002","T1566","T1068","T1098"],"_patchfirst":{"reason":"published","priority":14.9,"kev":null,"epss":{"score":0.00671,"percentile":0.51983},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Unified Communications Manager","techniqueIds":["T1189","T1204.002","T1566","T1068","T1098"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-1013","url":"https://patchfirst.co/cve/CVE-2019-1013/","title":"CVE-2019-1013: Windows GDI Information Disclosure Vulnerability","content_text":"Microsoft · Windows 7. Not in CISA KEV. EPSS 6.6% (higher than 93.9% of CVEs). CVSS 4.7 MEDIUM. ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1005 Data from Local System. Priority 7.7 of 100.","summary":"Windows GDI Information Disclosure Vulnerability","date_published":"2019-06-12T00:00:00.000Z","date_modified":"2025-05-20T17:49:41.000Z","tags":["T1204.002","T1566","T1005"],"_patchfirst":{"reason":"published","priority":7.7,"kev":null,"epss":{"score":0.06645,"percentile":0.93865},"cvss":{"score":4.7,"severity":"MEDIUM","version":"3.1"},"vendor":"Microsoft","product":"Windows 7","techniqueIds":["T1204.002","T1566","T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-1772","url":"https://patchfirst.co/cve/CVE-2019-1772/","title":"CVE-2019-1772: Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerability","content_text":"Cisco · Cisco WebEx WRF Player. Not in CISA KEV. EPSS 1.7% (higher than 77.4% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1059 Command and Scripting Interpreter. Priority 20.9 of 100.","summary":"Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerability","date_published":"2019-05-15T00:00:00.000Z","date_modified":"2024-11-20T17:21:42.000Z","tags":["T1204.002","T1566","T1059"],"_patchfirst":{"reason":"published","priority":20.9,"kev":null,"epss":{"score":0.01713,"percentile":0.77362},"cvss":{"score":7.8,"severity":"HIGH","version":"3.0"},"vendor":"Cisco","product":"Cisco WebEx WRF Player","techniqueIds":["T1204.002","T1566","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-1831","url":"https://patchfirst.co/cve/CVE-2019-1831/","title":"CVE-2019-1831: Cisco Email Security Appliance Content Filter Bypass Vulnerability","content_text":"Cisco · Cisco Email Security Appliance (ESA). Not in CISA KEV. EPSS 1.6% (higher than 76.4% of CVEs). CVSS 5.8 MEDIUM. ATT&CK: T1036 Masquerading; T1566 Phishing. Priority 19.3 of 100.","summary":"Cisco Email Security Appliance Content Filter Bypass Vulnerability","date_published":"2019-04-18T00:00:00.000Z","date_modified":"2024-11-19T19:10:48.000Z","tags":["T1036","T1566"],"_patchfirst":{"reason":"published","priority":19.3,"kev":null,"epss":{"score":0.01647,"percentile":0.76439},"cvss":{"score":5.8,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Email Security Appliance (ESA)","techniqueIds":["T1036","T1566"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-0609","url":"https://patchfirst.co/cve/CVE-2019-0609/","title":"CVE-2019-0609: A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft…","content_text":"Microsoft · Internet Explorer 11. Not in CISA KEV. EPSS 9.8% (higher than 95.6% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 19.8 of 100.","summary":"A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft…","date_published":"2019-04-08T00:00:00.000Z","date_modified":"2024-08-04T17:51:26.000Z","tags":["T1204.002","T1566","T1499.004","T1574","T1005","T1136","T1485","T1565"],"_patchfirst":{"reason":"published","priority":19.8,"kev":null,"epss":{"score":0.09846,"percentile":0.95554},"cvss":null,"vendor":"Microsoft","product":"Internet Explorer 11","techniqueIds":["T1204.002","T1566","T1499.004","T1574","T1005","T1136","T1485","T1565"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-15782","url":"https://patchfirst.co/cve/CVE-2018-15782/","title":"CVE-2018-15782: DSA-2018-226: RSA® Authentication Manager Relative Path Traversal Vulnerability","content_text":"Dell · RSA Authentication Manager. Not in CISA KEV. EPSS 0.4% (higher than 36.6% of CVEs). CVSS 7.7 HIGH. ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1068 Exploitation for Privilege Escalation. Priority 12.7 of 100.","summary":"DSA-2018-226: RSA® Authentication Manager Relative Path Traversal Vulnerability","date_published":"2019-01-16T00:00:00.000Z","date_modified":"2024-09-17T03:38:58.000Z","tags":["T1204.002","T1566","T1068"],"_patchfirst":{"reason":"published","priority":12.7,"kev":null,"epss":{"score":0.00423,"percentile":0.36613},"cvss":{"score":7.7,"severity":"HIGH","version":"3.0"},"vendor":"Dell","product":"RSA Authentication Manager","techniqueIds":["T1204.002","T1566","T1068"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-8575","url":"https://patchfirst.co/cve/CVE-2018-8575/","title":"CVE-2018-8575: A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in…","content_text":"Microsoft · Microsoft Project. Not in CISA KEV. EPSS 19.5% (higher than 97.4% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1068 Exploitation for Privilege Escalation; T1005 Data from Local System; T1136 Create Account; T1485 Data Destruction; +1 more. Priority 19.5 of 100.","summary":"A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in…","date_published":"2018-11-14T00:00:00.000Z","date_modified":"2024-08-05T07:02:25.000Z","tags":["T1204.002","T1566","T1068","T1005","T1136","T1485","T1565"],"_patchfirst":{"reason":"published","priority":19.5,"kev":null,"epss":{"score":0.19546,"percentile":0.97377},"cvss":null,"vendor":"Microsoft","product":"Microsoft Project","techniqueIds":["T1204.002","T1566","T1068","T1005","T1136","T1485","T1565"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-15376","url":"https://patchfirst.co/cve/CVE-2018-15376/","title":"CVE-2018-15376: Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Arbitrary Memory Write Vulnerabilities","content_text":"Cisco · Cisco IOS Software. Not in CISA KEV. EPSS 0.3% (higher than 25.8% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 5.2 of 100.","summary":"Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Arbitrary Memory Write Vulnerabilities","date_published":"2018-10-05T00:00:00.000Z","date_modified":"2024-11-26T14:35:14.000Z","tags":["T1204.002","T1566","T1499.004","T1574"],"_patchfirst":{"reason":"published","priority":5.2,"kev":null,"epss":{"score":0.00327,"percentile":0.25762},"cvss":null,"vendor":"Cisco","product":"Cisco IOS Software","techniqueIds":["T1204.002","T1566","T1499.004","T1574"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-8353","url":"https://patchfirst.co/cve/CVE-2018-8353/","title":"CVE-2018-8353: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in…","content_text":"Not in CISA KEV. EPSS 67.3% (higher than 99.3% of CVEs). Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 24.9 of 100.","summary":"A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in…","date_published":"2018-08-15T00:00:00.000Z","date_modified":"2024-08-05T06:54:35.000Z","tags":["public-exploit","T1204.002","T1566","T1499.004","T1574","T1005","T1136","T1485","T1565"],"_patchfirst":{"reason":"published","priority":24.9,"kev":null,"epss":{"score":0.67339,"percentile":0.99304},"cvss":null,"vendor":null,"product":null,"techniqueIds":["T1204.002","T1566","T1499.004","T1574","T1005","T1136","T1485","T1565"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2018-8110","url":"https://patchfirst.co/cve/CVE-2018-8110/","title":"CVE-2018-8110: A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka \"Microsoft…","content_text":"Microsoft · Microsoft Edge. Not in CISA KEV. EPSS 16.9% (higher than 97.1% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 19.4 of 100.","summary":"A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka \"Microsoft…","date_published":"2018-06-14T00:00:00.000Z","date_modified":"2024-08-05T06:46:13.000Z","tags":["T1204.002","T1566","T1499.004","T1574","T1005","T1136","T1485","T1565"],"_patchfirst":{"reason":"published","priority":19.4,"kev":null,"epss":{"score":0.16906,"percentile":0.97051},"cvss":null,"vendor":"Microsoft","product":"Microsoft Edge","techniqueIds":["T1204.002","T1566","T1499.004","T1574","T1005","T1136","T1485","T1565"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-8111","url":"https://patchfirst.co/cve/CVE-2018-8111/","title":"CVE-2018-8111: A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka \"Microsoft…","content_text":"Microsoft · Microsoft Edge. Not in CISA KEV. EPSS 16.9% (higher than 97% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 19.4 of 100.","summary":"A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka \"Microsoft…","date_published":"2018-06-14T00:00:00.000Z","date_modified":"2024-08-05T06:46:13.000Z","tags":["T1204.002","T1566","T1499.004","T1574","T1005","T1136","T1485","T1565"],"_patchfirst":{"reason":"published","priority":19.4,"kev":null,"epss":{"score":0.16906,"percentile":0.9705},"cvss":null,"vendor":"Microsoft","product":"Microsoft Edge","techniqueIds":["T1204.002","T1566","T1499.004","T1574","T1005","T1136","T1485","T1565"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-8160","url":"https://patchfirst.co/cve/CVE-2018-8160/","title":"CVE-2018-8160: An information disclosure vulnerability exists in Outlook when a message is opened, aka \"Microsoft Outlook Information…","content_text":"Microsoft · Word. Not in CISA KEV. EPSS 8.5% (higher than 95% of CVEs). ATT&CK: T1566 Phishing; T1005 Data from Local System; T1110 Brute Force. Priority 19.0 of 100.","summary":"An information disclosure vulnerability exists in Outlook when a message is opened, aka \"Microsoft Outlook Information…","date_published":"2018-05-09T00:00:00.000Z","date_modified":"2024-08-05T06:46:13.000Z","tags":["T1566","T1005","T1110"],"_patchfirst":{"reason":"published","priority":19,"kev":null,"epss":{"score":0.08461,"percentile":0.95008},"cvss":null,"vendor":"Microsoft","product":"Word","techniqueIds":["T1566","T1005","T1110"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}