https://patchfirst.co/technique/T1588.001/New and newly exploited CVEs that lead to ATT&CK T1588.001 Malware, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 13:00:36 GMThttps://patchfirst.co/cve/CVE-2025-0411/CVE-2025-0411#kevThu, 06 Feb 2025 00:00:00 GMT7-Zip · 7-Zip. In CISA KEV since 2025-02-06. ENISA EUVD lists it as exploited. EPSS 67.1% (higher than 99.3% of CVEs). CVSS 7.0 HIGH. Public exploit code exists. ATT&CK: T1553.005 Mark-of-the-Web Bypass; T1566.001 Spearphishing Attachment; T1588.001 Malware. Priority 67.8 of 100.kevpublic-exploitT1553.005T1566.001T1588.001https://patchfirst.co/cve/CVE-2023-34048/CVE-2023-34048#kevMon, 22 Jan 2024 00:00:00 GMTVMware · vCenter Server. In CISA KEV since 2024-01-22. ENISA EUVD lists it as exploited. EPSS 99.2% (higher than 99.94% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1588.001 Malware. Named in 1 threat report. Priority 73.7 of 100.kevpublic-exploitT1588.001