L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n16 menções
qilin13 menções
safepay10 menções
akira6 menções
incransom6 menções
Aoqin4 menções
Booba Project4 menções
Orova4 menções
payload4 menções
Whitearmor3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
AoqinSILIKO d.o.o.SI · Manufacturing · 2026-11-04
AoqinPetroshahd(Enap Sipetrol International - Egypt Branch)CL · Energy & Utilities · 2026-11-04
AoqinNextron TechnologyCN · Technology · 2026-11-04
AoqinGoldsmith & HullUS · Professional Services · 2026-11-04
incransombliss1041.comUS · Not Found · 2026-11-03
incransominnovativedriven.comUS · Technology · 2026-11-03
incransombutler.legalUS · Professional Services · 2026-11-03
incransomroundglass.comUS · Healthcare · 2026-11-03
incransomfidepartners.comES · Financial Services · 2026-11-03
chaosdarrequipment.comUS · Manufacturing · 2026-11-03
FalconBuchanan Ingersoll & Rooney PCUS · Professional Services · 2026-11-03
WhitearmorProject Trojan Horse— · Other · 2026-11-03
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-109468HIGH

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.65%
CVE-2026-108455MEDIUM

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 6.5EPSS 0.50%
CVE-2026-108454MEDIUM

Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 6.5EPSS 0.50%
CVE-2026-108453MEDIUM

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 6.5EPSS 0.51%
CVE-2026-108452HIGH

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft sharepoint server
CVSS 8.8EPSS 0.64%
CVE-2026-108451HIGH

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.43%
CVE-2026-108450HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.43%
CVE-2026-108449HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.43%
CVE-2026-108448HIGH

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 7.5EPSS 0.34%
CVE-2026-108447HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.43%
CVE-2026-108446HIGH

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024microsoft office online server
CVSS 8.8EPSS 0.43%
CVE-2026-108445HIGH

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.43%
CVE-2026-108444HIGH

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.43%
CVE-2026-108443HIGH

Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.43%
CVE-2026-108442HIGH

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.44%
CVE-2026-108441HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.44%
CVE-2026-108440HIGH

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.44%
CVE-2026-108439HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.44%
CVE-2026-108438MEDIUM

Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 6.5EPSS 0.51%
CVE-2026-108437HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.44%
CVE-2026-108436MEDIUM

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 6.5EPSS 0.51%
CVE-2026-108435MEDIUM

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 6.5EPSS 0.51%
CVE-2026-108434MEDIUM

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 6.5EPSS 0.51%
CVE-2026-108433HIGH

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 7.8EPSS 0.32%