https://patchfirst.co/technique/T1574/New and newly exploited CVEs that lead to ATT&CK T1574 Hijack Execution Flow, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2025-27363/CVE-2025-27363#kevTue, 06 May 2025 00:00:00 GMTFreeType · FreeType. In CISA KEV since 2025-05-06. ENISA EUVD lists it as exploited. EPSS 27.8% (higher than 98.1% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1574 Hijack Execution Flow; T1499.004 Application or System Exploitation. Priority 68.3 of 100.kevpublic-exploitT1574T1499.004https://patchfirst.co/cve/CVE-2024-21762/CVE-2024-21762#kevFri, 09 Feb 2024 00:00:00 GMTFortinet · FortiOS. In CISA KEV since 2024-02-09, known ransomware use. ENISA EUVD lists it as exploited. EPSS 84.6% (higher than 99.7% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1574 Hijack Execution Flow. Priority 79.8 of 100.kevransomwarepublic-exploitT1190T1574https://patchfirst.co/cve/CVE-2023-6549/CVE-2023-6549#kevWed, 17 Jan 2024 00:00:00 GMTCitrix · NetScaler ADC and NetScaler Gateway. In CISA KEV since 2024-01-17. ENISA EUVD lists it as exploited. EPSS 57.6% (higher than 99.08% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1574 Hijack Execution Flow; T1499 Endpoint Denial of Service. Priority 68.1 of 100.kevpublic-exploitT1574T1499https://patchfirst.co/cve/CVE-2023-7024/CVE-2023-7024#kevTue, 02 Jan 2024 00:00:00 GMTGoogle · Chromium WebRTC. In CISA KEV since 2024-01-02. ENISA EUVD lists it as exploited. EPSS 6.7% (higher than 93.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1574 Hijack Execution Flow. Priority 67.9 of 100.kevpublic-exploitT1189T1574https://patchfirst.co/cve/CVE-2023-4966/CVE-2023-4966#kevWed, 18 Oct 2023 00:00:00 GMTCitrix · NetScaler ADC and NetScaler Gateway. In CISA KEV since 2023-10-18, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1574 Hijack Execution Flow; T1005 Data from Local System. Named in 1 threat report. Priority 82.1 of 100.kevransomwarepublic-exploitT1574T1005https://patchfirst.co/cve/CVE-2023-5217/CVE-2023-5217#kevMon, 02 Oct 2023 00:00:00 GMTGoogle · Chromium libvpx. In CISA KEV since 2023-10-02. ENISA EUVD lists it as exploited. EPSS 49.0% (higher than 98.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1574 Hijack Execution Flow. Priority 68.9 of 100.kevpublic-exploitT1204.001T1574https://patchfirst.co/cve/CVE-2023-3519/CVE-2023-3519#kevWed, 19 Jul 2023 00:00:00 GMTCitrix · NetScaler ADC and NetScaler Gateway. In CISA KEV since 2023-07-19, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.7% (higher than 99.95% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1574 Hijack Execution Flow; T1105 Ingress Tool Transfer; T1087.002 Domain Account. Named in 6 threat reports. Priority 89.9 of 100.kevransomwarepublic-exploitT1190T1574T1105T1087.002https://patchfirst.co/cve/CVE-2023-27997/CVE-2023-27997#kevTue, 13 Jun 2023 00:00:00 GMTFortinet · FortiOS and FortiProxy SSL-VPN. In CISA KEV since 2023-06-13, known ransomware use. ENISA EUVD lists it as exploited. EPSS 85.7% (higher than 99.72% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1574 Hijack Execution Flow; T1136 Create Account. Named in 1 threat report. Priority 83.7 of 100.kevransomwarepublic-exploitT1190T1574T1136https://patchfirst.co/cve/CVE-2017-6742/CVE-2017-6742#kevWed, 19 Apr 2023 00:00:00 GMTCisco · IOS and IOS XE Software. In CISA KEV since 2023-04-19. ENISA EUVD lists it as exploited. EPSS 21.4% (higher than 97.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1574 Hijack Execution Flow; T1059 Command and Scripting Interpreter; T1048 Exfiltration Over Alternative Protocol; T1542.005 TFTP Boot. Priority 68.7 of 100.kevpublic-exploitT1574T1059T1048T1542.005https://patchfirst.co/cve/CVE-2022-3038/CVE-2022-3038#kevThu, 30 Mar 2023 00:00:00 GMTGoogle · Chromium Network Service. In CISA KEV since 2023-03-30. ENISA EUVD lists it as exploited. EPSS 24.9% (higher than 97.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1574 Hijack Execution Flow. Priority 68.7 of 100.kevpublic-exploitT1204.001T1574https://patchfirst.co/cve/CVE-2022-41328/CVE-2022-41328#kevTue, 14 Mar 2023 00:00:00 GMTFortinet · FortiOS. In CISA KEV since 2023-03-14. ENISA EUVD lists it as exploited. EPSS 10.7% (higher than 95.8% of CVEs). CVSS 7.1 HIGH. ATT&CK: T1574 Hijack Execution Flow; T1037 Boot or Logon Initialization Scripts; T1049 System Network Connections Discovery; T1565.001 Stored Data Manipulation. Named in 1 threat report. Priority 66.0 of 100.kevT1574T1037T1049T1565.001https://patchfirst.co/cve/CVE-2022-42475/CVE-2022-42475Mon, 02 Jan 2023 00:00:00 GMTFortinet · FortiOS. In CISA KEV since 2022-12-13, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.5% (higher than 99.94% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1574 Hijack Execution Flow; T1071.001 Web Protocols; T1622 Debugger Evasion. Named in 4 threat reports. Priority 88.8 of 100.kevransomwarepublic-exploitT1190T1574T1071.001T1622https://patchfirst.co/cve/CVE-2022-41073/CVE-2022-41073Wed, 09 Nov 2022 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2022-11-08, known ransomware use. ENISA EUVD lists it as exploited. EPSS 2.4% (higher than 83.8% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1068 Exploitation for Privilege Escalation; T1574 Hijack Execution Flow. Priority 75.2 of 100.kevransomwarepublic-exploitT1078T1068T1574https://patchfirst.co/cve/CVE-2016-1010/CVE-2016-1010#kevWed, 25 May 2022 00:00:00 GMTAdobe · Flash Player and AIR. In CISA KEV since 2022-05-25. ENISA EUVD lists it as exploited. EPSS 19.3% (higher than 97.3% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1574 Hijack Execution Flow. Named in 1 threat report. Priority 67.5 of 100.kevT1574https://patchfirst.co/cve/CVE-2022-1040/CVE-2022-1040#kevThu, 31 Mar 2022 00:00:00 GMTSophos · Firewall. In CISA KEV since 2022-03-31. ENISA EUVD lists it as exploited. EPSS 99.8% (higher than 99.96% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1040 Network Sniffing; T1078 Valid Accounts; T1557 Adversary-in-the-Middle; T1574 Hijack Execution Flow. Priority 79.9 of 100.kevpublic-exploitT1190T1059T1040T1078T1557T1574https://patchfirst.co/cve/CVE-2020-5735/CVE-2020-5735#kevWed, 03 Nov 2021 00:00:00 GMTAmcrest · Cameras and Network Video Recorder (NVR). In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 36.2% (higher than 98.5% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1574 Hijack Execution Flow; T1499 Endpoint Denial of Service. Priority 68.9 of 100.kevpublic-exploitT1574T1499https://patchfirst.co/cve/CVE-2019-15752/CVE-2019-15752#kevWed, 03 Nov 2021 00:00:00 GMTDocker · Desktop Community Edition. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 48.6% (higher than 98.9% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1574 Hijack Execution Flow. Priority 68.2 of 100.kevpublic-exploitT1068T1574https://patchfirst.co/cve/CVE-2020-15208/CVE-2020-15208Fri, 25 Sep 2020 00:00:00 GMTtensorflow · tensorflow. Not in CISA KEV. EPSS 0.9% (higher than 59.8% of CVEs). CVSS 7.4 HIGH. ATT&CK: T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 17.1 of 100.T1499.004T1574https://patchfirst.co/cve/CVE-2020-15199/CVE-2020-15199Fri, 25 Sep 2020 00:00:00 GMTtensorflow · tensorflow. Not in CISA KEV. EPSS 0.8% (higher than 56.9% of CVEs). CVSS 5.9 MEDIUM. ATT&CK: T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 15.5 of 100.T1499.004T1574https://patchfirst.co/cve/CVE-2020-15211/CVE-2020-15211Fri, 25 Sep 2020 00:00:00 GMTtensorflow · tensorflow. Not in CISA KEV. EPSS 0.9% (higher than 60.2% of CVEs). CVSS 4.8 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1574 Hijack Execution Flow. Priority 15.4 of 100.T1190T1574https://patchfirst.co/cve/CVE-2020-16874/CVE-2020-16874Fri, 11 Sep 2020 00:00:00 GMTMicrosoft · Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6). Not in CISA KEV. EPSS 4.3% (higher than 91.1% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.002 Malicious File; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; T1485 Data Destruction; +1 more. Priority 24.4 of 100.T1204.002T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2020-1569/CVE-2020-1569Mon, 17 Aug 2020 00:00:00 GMTMicrosoft · Microsoft Edge (EdgeHTML-based). Not in CISA KEV. EPSS 3.0% (higher than 87.3% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 23.6 of 100.T1204.002T1566T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2020-1495/CVE-2020-1495Mon, 17 Aug 2020 00:00:00 GMTMicrosoft · Microsoft SharePoint Server 2010 Service Pack 2. Not in CISA KEV. EPSS 4.2% (higher than 91% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 18.9 of 100.T1204.002T1566T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2020-1425/CVE-2020-1425Mon, 27 Jul 2020 00:00:00 GMTMicrosoft · Windows 10 Version 2004 for x64-based Systems. Not in CISA KEV. EPSS 9.3% (higher than 95.4% of CVEs). ATT&CK: T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 19.8 of 100.T1499.004T1574https://patchfirst.co/cve/CVE-2020-15100/CVE-2020-15100Tue, 14 Jul 2020 00:00:00 GMTschokokeksorg · freewvs. Not in CISA KEV. EPSS 0.3% (higher than 27.1% of CVEs). CVSS 2.8 LOW. ATT&CK: T1078 Valid Accounts; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 7.4 of 100.T1078T1499.004T1574https://patchfirst.co/cve/CVE-2020-11068/CVE-2020-11068Tue, 23 Jun 2020 00:00:00 GMTLoRa · LoRaMac-node. Not in CISA KEV. EPSS 0.9% (higher than 60.2% of CVEs). CVSS 5.0 MEDIUM. ATT&CK: T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 15.5 of 100.T1499.004T1574https://patchfirst.co/cve/CVE-2020-4068/CVE-2020-4068Mon, 22 Jun 2020 00:00:00 GMTkylebrowning · APNSwift. Not in CISA KEV. EPSS 1.3% (higher than 70.7% of CVEs). CVSS 6.3 MEDIUM. ATT&CK: T1091 Replication Through Removable Media; T1133 External Remote Services; T1190 Exploit Public-Facing Application; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 18.6 of 100.T1091T1133T1190T1566T1499.004T1574https://patchfirst.co/cve/CVE-2020-3198/CVE-2020-3198Wed, 03 Jun 2020 00:00:00 GMTCisco · Cisco IOS 12.2(60)EZ16. Not in CISA KEV. EPSS 4.6% (higher than 91.6% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1133 External Remote Services; T1190 Exploit Public-Facing Application; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 25.2 of 100.T1133T1190T1566T1499.004T1574https://patchfirst.co/cve/CVE-2020-11039/CVE-2020-11039Fri, 29 May 2020 00:00:00 GMTFreeRDP · FreeRDP. Not in CISA KEV. EPSS 1.1% (higher than 66.4% of CVEs). CVSS 8.0 HIGH. ATT&CK: T1005 Data from Local System; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 18.9 of 100.T1005T1499.004T1574https://patchfirst.co/cve/CVE-2020-1109/CVE-2020-1109Thu, 21 May 2020 00:00:00 GMTMicrosoft · Windows 10 Version 1709. Not in CISA KEV. EPSS 1.0% (higher than 62.6% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; T1485 Data Destruction; T1565 Data Manipulation. Priority 18.0 of 100.T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2020-3309/CVE-2020-3309Wed, 06 May 2020 00:00:00 GMTCisco · Cisco Firepower Threat Defense Software. Not in CISA KEV. EPSS 1.8% (higher than 78% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1133 External Remote Services; T1190 Exploit Public-Facing Application; T1574 Hijack Execution Flow; T1565.001 Stored Data Manipulation. Priority 20.2 of 100.T1133T1190T1574T1565.001https://patchfirst.co/cve/CVE-2020-0898/CVE-2020-0898Thu, 12 Mar 2020 00:00:00 GMTMicrosoft · Windows. Not in CISA KEV. EPSS 0.9% (higher than 59% of CVEs). ATT&CK: T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 11.8 of 100.T1499.004T1574https://patchfirst.co/cve/CVE-2020-5254/CVE-2020-5254Tue, 10 Mar 2020 00:00:00 GMTNetHack · NetHack. Not in CISA KEV. EPSS 1.1% (higher than 66.4% of CVEs). CVSS 3.9 LOW. Public exploit code exists. ATT&CK: T1574 Hijack Execution Flow. Priority 21.0 of 100.public-exploitT1574https://patchfirst.co/cve/CVE-2020-5253/CVE-2020-5253Tue, 10 Mar 2020 00:00:00 GMTNetHack · NetHack. Not in CISA KEV. EPSS 0.5% (higher than 45.6% of CVEs). CVSS 3.9 LOW. ATT&CK: T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 11.8 of 100.T1499.004T1574https://patchfirst.co/cve/CVE-2020-0671/CVE-2020-0671Tue, 11 Feb 2020 00:00:00 GMTMicrosoft · Windows. Not in CISA KEV. EPSS 1.4% (higher than 71.8% of CVEs). ATT&CK: T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; T1485 Data Destruction; T1565 Data Manipulation. Priority 15.0 of 100.T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2020-5210/CVE-2020-5210Tue, 28 Jan 2020 00:00:00 GMTNetHack · NetHack. Not in CISA KEV. EPSS 0.8% (higher than 56.6% of CVEs). CVSS 5.0 MEDIUM. ATT&CK: T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 14.8 of 100.T1499.004T1574https://patchfirst.co/cve/CVE-2019-12660/CVE-2019-12660Wed, 25 Sep 2019 00:00:00 GMTCisco · Cisco IOS XE Software 3.2.11aSG. Not in CISA KEV. EPSS 0.3% (higher than 23% of CVEs). CVSS 5.5 MEDIUM. ATT&CK: T1078 Valid Accounts; T1574 Hijack Execution Flow. Priority 8.4 of 100.T1078T1574https://patchfirst.co/cve/CVE-2019-13522/CVE-2019-13522Wed, 04 Sep 2019 00:00:00 GMTNot in CISA KEV. EPSS 1.4% (higher than 71.8% of CVEs). ATT&CK: T1204.002 Malicious File; T1574 Hijack Execution Flow. Priority 14.4 of 100.T1204.002T1574https://patchfirst.co/cve/CVE-2019-10980/CVE-2019-10980Mon, 05 Aug 2019 00:00:00 GMTNot in CISA KEV. EPSS 1.0% (higher than 62.9% of CVEs). ATT&CK: T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 12.6 of 100.T1499.004T1574https://patchfirst.co/cve/CVE-2019-1118/CVE-2019-1118Mon, 29 Jul 2019 00:00:00 GMTMicrosoft · Windows. Not in CISA KEV. EPSS 23.6% (higher than 97.8% of CVEs). Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1204.002 Malicious File; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 24.6 of 100.public-exploitT1189T1204.002T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2019-1106/CVE-2019-1106Mon, 29 Jul 2019 00:00:00 GMTMicrosoft · Microsoft Edge. Not in CISA KEV. EPSS 9.2% (higher than 95.3% of CVEs). ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 19.1 of 100.T1189T1203T1499.004T1574https://patchfirst.co/cve/CVE-2019-1052/CVE-2019-1052Wed, 12 Jun 2019 00:00:00 GMTMicrosoft · Microsoft Edge (EdgeHTML-based). Not in CISA KEV. EPSS 2.4% (higher than 84% of CVEs). CVSS 4.2 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 19.7 of 100.T1189T1203T1499.004T1574https://patchfirst.co/cve/CVE-2019-1035/CVE-2019-1035Wed, 12 Jun 2019 00:00:00 GMTMicrosoft · Microsoft SharePoint Server 2019. Not in CISA KEV. EPSS 6.6% (higher than 93.8% of CVEs). ATT&CK: T1203 Exploitation for Client Execution; T1204.002 Malicious File; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 19.4 of 100.T1203T1204.002T1499.004T1574https://patchfirst.co/cve/CVE-2019-3723/CVE-2019-3723Thu, 06 Jun 2019 00:00:00 GMTDell EMC · OpenManage Server Administrator. Not in CISA KEV. EPSS 1.8% (higher than 79.1% of CVEs). CVSS 9.1 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1485 Data Destruction; T1059 Command and Scripting Interpreter; T1574 Hijack Execution Flow. Priority 22.2 of 100.T1190T1485T1059T1574https://patchfirst.co/cve/CVE-2019-0911/CVE-2019-0911Thu, 16 May 2019 00:00:00 GMTMicrosoft · Internet Explorer 11. Not in CISA KEV. EPSS 9.1% (higher than 95.3% of CVEs). ATT&CK: T1189 Drive-by Compromise; T1204.002 Malicious File; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 19.1 of 100.T1189T1204.002T1499.004T1574https://patchfirst.co/cve/CVE-2019-0926/CVE-2019-0926Thu, 16 May 2019 00:00:00 GMTMicrosoft · Microsoft Edge. Not in CISA KEV. EPSS 8.1% (higher than 94.8% of CVEs). ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 19.0 of 100.T1189T1203T1499.004T1574https://patchfirst.co/cve/CVE-2019-0609/CVE-2019-0609Mon, 08 Apr 2019 00:00:00 GMTMicrosoft · Internet Explorer 11. Not in CISA KEV. EPSS 9.8% (higher than 95.6% of CVEs). ATT&CK: T1204.002 Malicious File; T1566 Phishing; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow; T1005 Data from Local System; T1136 Create Account; +2 more. Priority 19.8 of 100.T1204.002T1566T1499.004T1574T1005T1136T1485T1565https://patchfirst.co/cve/CVE-2019-6538/CVE-2019-6538Mon, 25 Mar 2019 00:00:00 GMTMedtronic · Conexus Radio Frequency Telemetry Protocol. Not in CISA KEV. EPSS 0.9% (higher than 59.5% of CVEs). CVSS 9.3 CRITICAL. ATT&CK: T1005 Data from Local System; T1499.004 Application or System Exploitation; T1557 Adversary-in-the-Middle; T1574 Hijack Execution Flow. Priority 19.8 of 100.T1005T1499.004T1557T1574https://patchfirst.co/cve/CVE-2019-0576/CVE-2019-0576Tue, 08 Jan 2019 00:00:00 GMTMicrosoft · Windows 7. Not in CISA KEV. EPSS 17.0% (higher than 97.1% of CVEs). ATT&CK: T1204.002 Malicious File; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 19.4 of 100.T1204.002T1499.004T1574https://patchfirst.co/cve/CVE-2018-18987/CVE-2018-18987Fri, 30 Nov 2018 00:00:00 GMTNot in CISA KEV. EPSS 3.2% (higher than 88.1% of CVEs). ATT&CK: T1059 Command and Scripting Interpreter; T1499.004 Application or System Exploitation; T1574 Hijack Execution Flow. Priority 17.6 of 100.T1059T1499.004T1574