L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
medusalocker17 menções
N0n16 menções
BrainCipher11 menções
safepay8 menções
incransom5 menções
play5 menções
Aoqin4 menções
Booba Project4 menções
Dark Project4 menções
SilentRansomGroup3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
everstakene*****h.com— · Not Found · 2026-11-05
PixelLeaksDisclosed— · Other · 2026-11-05
Dark ProjectCustom BakehouseUS · Retail & E-Commerce · 2026-11-05
N0nDelta Dental of MissouriUS · Healthcare · 2026-11-05
N0nThe Container StoreUS · Retail & E-Commerce · 2026-11-05
BYODFirst and Final Warning - IHG Hotels & Resorts (Estate)— · Hospitality · 2026-11-05
qilinCalvary Christian CollegeAU · Education · 2026-11-05
AuditTeamkx***omCN · Technology · 2026-11-05
medusalockerMsnUS · Technology · 2026-11-04
medusalockerbaiapai— · Technology · 2026-11-04
medusalockerVinitglovesIN · Manufacturing · 2026-11-04
medusalockerJatl— · Not Found · 2026-11-04
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-100121HIGH

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 7.5EPSS 0.28%
CVE-2026-100120HIGH

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 7.5EPSS 0.46%
CVE-2026-100119HIGH

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 7.5EPSS 0.46%
CVE-2026-100118HIGH

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 7.5EPSS 0.34%
CVE-2026-100117HIGH

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 7.5EPSS 0.57%
CVE-2026-100116MEDIUM

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 5.9EPSS 0.24%
CVE-2026-100115HIGH

CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 7.5EPSS 0.43%
CVE-2026-100114HIGH

CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 7.5EPSS 0.43%
CVE-2026-100113HIGH

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

AFFECTED SURFACEadobe c2paadobe c2pa-webadobe c2patool
CVSS 7.5EPSS 0.57%
CVE-2026-97312HIGH

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

AFFECTED SURFACEadobe photoshopapple macosmicrosoft windows
CVSS 7.8EPSS 0.19%
CVE-2026-96956HIGH

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.0EPSS 0.42%
CVE-2026-96523HIGH

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

AFFECTED SURFACEadobe photoshopapple macosmicrosoft windows
CVSS 7.8EPSS 0.19%
CVE-2026-96522HIGH

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

AFFECTED SURFACEadobe photoshopapple macosmicrosoft windows
CVSS 7.8EPSS 0.19%
CVE-2026-96521HIGH

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.19%
CVE-2026-95696MEDIUM

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.32%
CVE-2026-95695HIGH

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization.

AFFECTED SURFACEProduct not specified
CVSS 7.4EPSS 0.33%
CVE-2026-95641HIGH

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.19%
CVE-2026-95640MEDIUM

Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.18%
CVE-2026-95639HIGH

Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

AFFECTED SURFACEProduct not specified
CVSS 8.6EPSS 0.21%
CVE-2026-95638HIGH

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.25%
CVE-2026-95637HIGH

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.19%
CVE-2026-95636HIGH

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.22%
CVE-2026-95635HIGH

Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.22%
CVE-2026-94520MEDIUM

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.

AFFECTED SURFACEProduct not specified
CVSS 4.9EPSS 0.61%