L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
medusalocker17 menções
N0n16 menções
BrainCipher11 menções
safepay8 menções
incransom5 menções
play5 menções
Aoqin4 menções
Booba Project4 menções
Dark Project4 menções
SilentRansomGroup3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
everstakene*****h.com— · Not Found · 2026-11-05
PixelLeaksDisclosed— · Other · 2026-11-05
Dark ProjectCustom BakehouseUS · Retail & E-Commerce · 2026-11-05
N0nDelta Dental of MissouriUS · Healthcare · 2026-11-05
N0nThe Container StoreUS · Retail & E-Commerce · 2026-11-05
BYODFirst and Final Warning - IHG Hotels & Resorts (Estate)— · Hospitality · 2026-11-05
qilinCalvary Christian CollegeAU · Education · 2026-11-05
AuditTeamkx***omCN · Technology · 2026-11-05
medusalockerMsnUS · Technology · 2026-11-04
medusalockerbaiapai— · Technology · 2026-11-04
medusalockerVinitglovesIN · Manufacturing · 2026-11-04
medusalockerJatl— · Not Found · 2026-11-04
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-110141LOW

Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

AFFECTED SURFACEgoogle chrome
CVSS 3.1EPSS 0.18%
CVE-2026-110140HIGH

Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

AFFECTED SURFACEgoogle chrome
CVSS 8.8EPSS 0.33%
CVE-2026-110139HIGH

Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

AFFECTED SURFACEgoogle chrome
CVSS 8.8EPSS 0.30%
CVE-2026-110138HIGH

Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

AFFECTED SURFACEgoogle chrome
CVSS 8.3EPSS 0.30%
CVE-2026-110137HIGH

Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

AFFECTED SURFACEgoogle chrome
CVSS 8.8EPSS 0.38%
CVE-2026-110136CRITICAL

Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

AFFECTED SURFACEgoogle chrome
CVSS 9.6EPSS 0.34%
CVE-2026-106627HIGH

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 7.5EPSS 0.64%
CVE-2026-105902HIGH

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 7.5EPSS 0.51%
CVE-2026-104345HIGH

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 7.5EPSS 0.46%
CVE-2026-103820MEDIUM

CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in an arbitrary file system write. An attacker could leverage this vulnerability to write to unauthorized files or directories outside of intended restrictions. Exploitation of this issue requires user interaction in that a victim must extract a maliciously crafted file.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 5.5EPSS 0.22%
CVE-2026-103297HIGH

CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 7.5EPSS 0.43%
CVE-2026-103296HIGH

CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 7.5EPSS 0.43%
CVE-2026-103294MEDIUM

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 5.9EPSS 0.24%
CVE-2026-102502MEDIUM

CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 5.3EPSS 0.35%
CVE-2026-102501MEDIUM

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 5.3EPSS 0.38%
CVE-2026-100139HIGH

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 7.5EPSS 0.51%
CVE-2026-100138HIGH

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 7.5EPSS 0.64%
CVE-2026-100137HIGH

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 7.5EPSS 0.51%
CVE-2026-100136HIGH

CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 7.5EPSS 0.57%
CVE-2026-100135HIGH

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 7.5EPSS 0.57%
CVE-2026-100125MEDIUM

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 5.9EPSS 0.54%
CVE-2026-100124HIGH

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 7.5EPSS 0.57%
CVE-2026-100123HIGH

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 7.5EPSS 0.28%
CVE-2026-100122HIGH

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 7.5EPSS 0.28%