https://patchfirst.co/technique/T1574.001/New and newly exploited CVEs that lead to ATT&CK T1574.001 DLL, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 13:00:36 GMThttps://patchfirst.co/cve/CVE-2012-1854/CVE-2012-1854#kevMon, 13 Apr 2026 00:00:00 GMTMicrosoft · Visual Basic for Applications (VBA). In CISA KEV since 2026-04-13. ENISA EUVD lists it as exploited. EPSS 20.9% (higher than 97.5% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.002 Malicious File; T1574.001 DLL. Priority 63.0 of 100.kevT1204.002T1574.001https://patchfirst.co/cve/CVE-2024-7262/CVE-2024-7262#kevTue, 03 Sep 2024 00:00:00 GMTKingsoft · WPS Office. In CISA KEV since 2024-09-03. ENISA EUVD lists it as exploited. EPSS 3.1% (higher than 87.6% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.002 Malicious File; T1574.001 DLL. Priority 61.0 of 100.kevT1204.002T1574.001https://patchfirst.co/cve/CVE-2020-3153/CVE-2020-3153#kevMon, 24 Oct 2022 00:00:00 GMTCisco · AnyConnect Secure. In CISA KEV since 2022-10-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS 28.5% (higher than 98.1% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1036 Masquerading; T1574.001 DLL. Priority 77.2 of 100.kevransomwarepublic-exploitT1078T1036T1574.001https://patchfirst.co/cve/CVE-2019-10971/CVE-2019-10971Wed, 12 Jun 2019 00:00:00 GMTNot in CISA KEV. EPSS 1.1% (higher than 64.4% of CVEs). ATT&CK: T1574.001 DLL. Priority 12.9 of 100.T1574.001