https://patchfirst.co/technique/T1566/New and newly exploited CVEs that lead to ATT&CK T1566 Phishing, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2025-27915/CVE-2025-27915#kevTue, 07 Oct 2025 00:00:00 GMTSynacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2025-10-07. ENISA EUVD lists it as exploited. EPSS 4.1% (higher than 90.7% of CVEs). CVSS 5.4 MEDIUM. Public exploit code exists. ATT&CK: T1566 Phishing; T1059 Command and Scripting Interpreter. Priority 64.9 of 100.kevpublic-exploitT1566T1059https://patchfirst.co/cve/CVE-2024-11182/CVE-2024-11182#kevMon, 19 May 2025 00:00:00 GMTMDaemon · Email Server. In CISA KEV since 2025-05-19. ENISA EUVD lists it as exploited. EPSS 33.3% (higher than 98.4% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1566 Phishing; T1059 Command and Scripting Interpreter; T1567 Exfiltration Over Web Service. Priority 61.9 of 100.kevT1566T1059T1567https://patchfirst.co/cve/CVE-2025-24054/CVE-2025-24054#kevThu, 17 Apr 2025 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2025-04-17. ENISA EUVD lists it as exploited. EPSS 62.3% (higher than 99.18% of CVEs). CVSS 5.4 MEDIUM. Public exploit code exists. ATT&CK: T1566 Phishing; T1555 Credentials from Password Stores. Priority 66.6 of 100.kevpublic-exploitT1566T1555https://patchfirst.co/cve/CVE-2024-43451/CVE-2024-43451#kevTue, 12 Nov 2024 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2024-11-12. ENISA EUVD lists it as exploited. EPSS 84.3% (higher than 99.7% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. ATT&CK: T1566 Phishing. Named in 1 threat report. Priority 81.4 of 100.kevpublic-exploitT1566https://patchfirst.co/cve/CVE-2023-36884/CVE-2023-36884#kevMon, 17 Jul 2023 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2023-07-17, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.4% (higher than 99.94% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1566 Phishing; T1204.002 Malicious File; T1005 Data from Local System; T1486 Data Encrypted for Impact; T1489 Service Stop; T1490 Inhibit System Recovery; +1 more. Priority 78.2 of 100.kevransomwarepublic-exploitT1566T1204.002T1005T1486T1489T1490T1553.005https://patchfirst.co/cve/CVE-2022-41128/CVE-2022-41128Wed, 09 Nov 2022 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2022-11-08. ENISA EUVD lists it as exploited. EPSS 24.6% (higher than 97.9% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1566 Phishing; T1203 Exploitation for Client Execution; T1070 Indicator Removal. Priority 63.7 of 100.kevT1566T1203T1070https://patchfirst.co/cve/CVE-2022-34713/CVE-2022-34713#kevTue, 09 Aug 2022 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2022-08-09. ENISA EUVD lists it as exploited. EPSS 67.8% (higher than 99.31% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1566 Phishing; T1204.002 Malicious File; T1059 Command and Scripting Interpreter. Priority 63.3 of 100.kevT1566T1204.002T1059https://patchfirst.co/cve/CVE-2021-40449/CVE-2021-40449#kevWed, 17 Nov 2021 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2021-11-17, known ransomware use. ENISA EUVD lists it as exploited. EPSS 81.9% (higher than 99.65% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1566 Phishing; T1068 Exploitation for Privilege Escalation; T1016 System Network Configuration Discovery; T1027 Obfuscated Files or Information; T1059.003 Windows Command Shell; T1071.001 Web Protocols; +2 more. Priority 78.4 of 100.kevransomwarepublic-exploitT1566T1068T1016T1027T1059.003T1071.001T1082T1573.001https://patchfirst.co/cve/CVE-2020-3440/CVE-2020-3440Wed, 26 Aug 2020 00:00:00 GMTCisco · Cisco Webex Meetings. Not in CISA KEV. EPSS 2.6% (higher than 85.4% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1565.001 Stored Data Manipulation. Priority 23.0 of 100.T1204.002T1566T1565.001https://patchfirst.co/cve/CVE-2020-1569/CVE-2020-1569Mon, 17 Aug 2020 00:00:00 GMTMicrosoft · Microsoft Edge (EdgeHTML-based). Not in CISA KEV. EPSS 3.0% (higher than 87.3% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 23.6 of 100.T1204.002T1566T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2020-1495/CVE-2020-1495Mon, 17 Aug 2020 00:00:00 GMTMicrosoft · Microsoft SharePoint Server 2010 Service Pack 2. Not in CISA KEV. EPSS 4.2% (higher than 91% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 18.9 of 100.T1204.002T1566T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2020-4068/CVE-2020-4068Mon, 22 Jun 2020 00:00:00 GMTkylebrowning · APNSwift. Not in CISA KEV. EPSS 1.3% (higher than 70.7% of CVEs). CVSS 6.3 MEDIUM. ATT&CK: T1091 Replication Through Removable Media; T1133 External Remote Services; T1190 Exploit Public-Facing Application; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 18.6 of 100.T1091T1133T1190T1566T1499.004T1574https://patchfirst.co/cve/CVE-2020-3198/CVE-2020-3198Wed, 03 Jun 2020 00:00:00 GMTCisco · Cisco IOS 12.2(60)EZ16. Not in CISA KEV. EPSS 4.6% (higher than 91.6% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1133 External Remote Services; T1190 Exploit Public-Facing Application; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 25.2 of 100.T1133T1190T1566T1499.004T1574https://patchfirst.co/cve/CVE-2020-3322/CVE-2020-3322Wed, 03 Jun 2020 00:00:00 GMTCisco · Cisco Webex Network Recording Player. Not in CISA KEV. EPSS 0.7% (higher than 51.5% of CVEs). CVSS 3.3 LOW. ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation. Priority 12.6 of 100.T1204.002T1566T1499.004https://patchfirst.co/cve/CVE-2019-15276/CVE-2019-15276Tue, 26 Nov 2019 00:00:00 GMTCisco · Cisco Wireless LAN Controller (WLC). Not in CISA KEV. EPSS 46.3% (higher than 98.8% of CVEs). CVSS 7.7 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1566 Phishing; T1499.004 Application or System Exploitation. Priority 30.2 of 100.public-exploitT1190T1566T1499.004https://patchfirst.co/cve/CVE-2019-1915/CVE-2019-1915Wed, 02 Oct 2019 00:00:00 GMTCisco · Cisco Unified Communications Manager. Not in CISA KEV. EPSS 0.7% (higher than 52% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1204.002 Malicious File; T1566 Phishing; T1068 Exploitation for Privilege Escalation; T1098 Account Manipulation. Priority 14.9 of 100.T1189T1204.002T1566T1068T1098https://patchfirst.co/cve/CVE-2019-1013/CVE-2019-1013Wed, 12 Jun 2019 00:00:00 GMTMicrosoft · Windows 7. Not in CISA KEV. EPSS 6.6% (higher than 93.9% of CVEs). CVSS 4.7 MEDIUM. ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1005 Data from Local System. Priority 7.7 of 100.T1204.002T1566T1005https://patchfirst.co/cve/CVE-2019-1772/CVE-2019-1772Wed, 15 May 2019 00:00:00 GMTCisco · Cisco WebEx WRF Player. Not in CISA KEV. EPSS 1.7% (higher than 77.4% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1059 Command and Scripting Interpreter. Priority 20.9 of 100.T1204.002T1566T1059https://patchfirst.co/cve/CVE-2019-1831/CVE-2019-1831Thu, 18 Apr 2019 00:00:00 GMTCisco · Cisco Email Security Appliance (ESA). Not in CISA KEV. EPSS 1.6% (higher than 76.4% of CVEs). CVSS 5.8 MEDIUM. ATT&CK: T1036 Masquerading; T1566 Phishing. Priority 19.3 of 100.T1036T1566https://patchfirst.co/cve/CVE-2019-0609/CVE-2019-0609Mon, 08 Apr 2019 00:00:00 GMTMicrosoft · Internet Explorer 11. Not in CISA KEV. EPSS 9.8% (higher than 95.6% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 19.8 of 100.T1204.002T1566T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2018-15782/CVE-2018-15782Wed, 16 Jan 2019 00:00:00 GMTDell · RSA Authentication Manager. Not in CISA KEV. EPSS 0.4% (higher than 36.6% of CVEs). CVSS 7.7 HIGH. ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1068 Exploitation for Privilege Escalation. Priority 12.7 of 100.T1204.002T1566T1068https://patchfirst.co/cve/CVE-2018-8575/CVE-2018-8575Wed, 14 Nov 2018 00:00:00 GMTMicrosoft · Microsoft Project. Not in CISA KEV. EPSS 19.5% (higher than 97.4% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1068 Exploitation for Privilege Escalation; T1005 Data from Local System; T1136 Create Account; T1485 Data Destruction; +1 more. Priority 19.5 of 100.T1204.002T1566T1068T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2018-15376/CVE-2018-15376Fri, 05 Oct 2018 00:00:00 GMTCisco · Cisco IOS Software. Not in CISA KEV. EPSS 0.3% (higher than 25.8% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 5.2 of 100.T1204.002T1566T1499.004T1574https://patchfirst.co/cve/CVE-2018-8353/CVE-2018-8353Wed, 15 Aug 2018 00:00:00 GMTNot in CISA KEV. EPSS 67.3% (higher than 99.3% of CVEs). Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 24.9 of 100.public-exploitT1204.002T1566T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2018-8110/CVE-2018-8110Thu, 14 Jun 2018 00:00:00 GMTMicrosoft · Microsoft Edge. Not in CISA KEV. EPSS 16.9% (higher than 97.1% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 19.4 of 100.T1204.002T1566T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2018-8111/CVE-2018-8111Thu, 14 Jun 2018 00:00:00 GMTMicrosoft · Microsoft Edge. Not in CISA KEV. EPSS 16.9% (higher than 97% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 19.4 of 100.T1204.002T1566T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2018-8160/CVE-2018-8160Wed, 09 May 2018 00:00:00 GMTMicrosoft · Word. Not in CISA KEV. EPSS 8.5% (higher than 95% of CVEs). ATT&CK: T1566 Phishing; T1005 Data from Local System; T1110 Brute Force. Priority 19.0 of 100.T1566T1005T1110