L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
Booba Project16 menções
qilin10 menções
Whitearmor8 menções
everest8 menções
play7 menções
SilentRansomGroup6 menções
Shiba4 menções
emperador4 menções
everstake4 menções
rhysida4 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
Global Secret GroupTDS Telecommunications LLC.US · Energy & Utilities · 2026-10-29
ShibaIT Foods Industries— · Agriculture and Food Production · 2026-10-29
ShibaFriendly Senior Living— · Healthcare · 2026-10-29
ShibaMorgan White Group— · Professional Services · 2026-10-29
ShibaAntwerp House DentistryGB · Healthcare · 2026-10-29
everstakeas*****g.com— · Not Found · 2026-10-29
everstakeca*****s.com— · Not Found · 2026-10-29
everstakein*****s.com— · Not Found · 2026-10-29
everstakecorp-smart.com— · Technology · 2026-10-29
Whitearmorrolly.io— · Technology · 2026-10-29
emperadorLA PROFUMERIA SRLIT · Retail & E-Commerce · 2026-10-29
rhysidaINTAX, Inc.— · Financial Services · 2026-10-29
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

27753 REGISTROS ENCONTRADOSFEED 2026-10-27
CVE-2026-113204HIGH

Use after free in TrustedWebActivities in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chromegoogle android
CVSS 8.8EPSS 0.48%
CVE-2026-113203HIGH

Use after free in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 8.8EPSS 0.40%
CVE-2026-113202HIGH

Use after free in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 8.8EPSS 0.56%
CVE-2026-113201MEDIUM

Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

AFFECTED SURFACEgoogle chrome
CVSS 6.5EPSS 0.32%
CVE-2026-113200HIGH

Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 8.8EPSS 0.40%
CVE-2026-113199MEDIUM

Out of bounds read in Payments in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 6.5EPSS 0.32%
CVE-2026-113198HIGH

Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 8.8EPSS 0.44%
CVE-2026-113197HIGH

Use after free in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 8.8EPSS 0.44%
CVE-2026-113196ANALYSIS

Improper access control in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEProduct not specified
CVSS N/DEPSS 0.35%
CVE-2026-113195HIGH

Improper input validation in Downloads in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 8.8EPSS 0.44%
CVE-2026-113194HIGH

Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 8.8EPSS 0.44%
CVE-2026-113193MEDIUM

Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)

AFFECTED SURFACEgoogle chrome
CVSS 6.5EPSS 0.32%
CVE-2026-113192HIGH

Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

AFFECTED SURFACEgoogle chrome
CVSS 8.8EPSS 0.44%
CVE-2026-113191HIGH

Use after free in Internals in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chromeapple macos
CVSS 8.8EPSS 0.39%
CVE-2026-113190HIGH

Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 8.8EPSS 0.39%
CVE-2026-113189CRITICAL

Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 9.6EPSS 0.47%
CVE-2026-113188HIGH

Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

AFFECTED SURFACEgoogle chrome
CVSS 8.8EPSS 0.43%
CVE-2026-113187HIGH

Use after free in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 8.8EPSS 0.43%
CVE-2026-113186CRITICAL

Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

AFFECTED SURFACEgoogle chrome
CVSS 9.6EPSS 0.47%
CVE-2026-113185HIGH

Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 8.8EPSS 0.44%
CVE-2026-113184HIGH

Memory corruption in Scheduling in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

AFFECTED SURFACEgoogle chrome
CVSS 8.8EPSS 0.44%
CVE-2026-113183HIGH

Memory corruption in FedCM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 8.8EPSS 0.44%
CVE-2026-113182HIGH

Memory corruption in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

AFFECTED SURFACEgoogle chrome
CVSS 8.8EPSS 0.45%
CVE-2026-113181HIGH

Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

AFFECTED SURFACEgoogle chrome
CVSS 8.8EPSS 0.44%