L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
medusalocker17 menções
N0n15 menções
BrainCipher11 menções
safepay8 menções
Aoqin5 menções
incransom5 menções
play5 menções
Booba Project4 menções
Dark Project4 menções
SilentRansomGroup3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
AoqinSistelBR · Technology · 2026-11-05
everstakene*****h.com— · Not Found · 2026-11-05
PixelLeaksDisclosed— · Other · 2026-11-05
Dark ProjectCustom BakehouseUS · Retail & E-Commerce · 2026-11-05
N0nDelta Dental of MissouriUS · Healthcare · 2026-11-05
N0nThe Container StoreUS · Retail & E-Commerce · 2026-11-05
BYODFirst and Final Warning - IHG Hotels & Resorts (Estate)— · Hospitality · 2026-11-05
qilinCalvary Christian CollegeAU · Education · 2026-11-05
AuditTeamkx***omCN · Technology · 2026-11-05
medusalockerMsnUS · Technology · 2026-11-04
medusalockerbaiapai— · Technology · 2026-11-04
medusalockerVinitglovesIN · Manufacturing · 2026-11-04
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-97817MEDIUM

Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 6.5EPSS 0.95%
CVE-2026-97816CRITICAL

Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2
CVSS 9.8EPSS 0.89%
CVE-2026-97815CRITICAL

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 9.8EPSS 0.67%
CVE-2026-97814CRITICAL

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 9.8EPSS 0.97%
CVE-2026-97813MEDIUM

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2
CVSS 6.5EPSS 0.95%
CVE-2026-97812HIGH

Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1
CVSS 7.0EPSS 0.26%
CVE-2026-97811HIGH

Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2
CVSS 7.8EPSS 0.23%
CVE-2026-97810HIGH

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1microsoft windows 11 26h2microsoft windows server 2022microsoft windows server 2025
CVSS 7.0EPSS 0.26%
CVE-2026-97809HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2
CVSS 7.8EPSS 0.26%
CVE-2026-97808HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2
CVSS 7.0EPSS 0.26%
CVE-2026-97807HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2
CVSS 7.8EPSS 0.26%
CVE-2026-97806HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2
CVSS 7.8EPSS 0.33%
CVE-2026-97805CRITICAL

Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 9.8EPSS 0.94%
CVE-2026-97804HIGH

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.8EPSS 0.32%
CVE-2026-97803HIGH

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 11 26h1
CVSS 7.8EPSS 0.31%
CVE-2026-97801HIGH

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.61%
CVE-2026-97800HIGH

Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1microsoft windows 11 26h2
CVSS 7.8EPSS 0.24%
CVE-2026-97799HIGH

Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1microsoft windows 11 26h2
CVSS 7.8EPSS 0.29%
CVE-2026-97798HIGH

Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1
CVSS 7.8EPSS 0.34%
CVE-2026-97794HIGH

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1microsoft windows 11 26h2microsoft windows server 2022
CVSS 7.8EPSS 0.31%
CVE-2026-97793HIGH

Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2
CVSS 7.0EPSS 0.24%
CVE-2026-97792HIGH

Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h2microsoft windows server 2022microsoft windows server 2025
CVSS 7.8EPSS 0.30%
CVE-2026-97790MEDIUM

Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.

AFFECTED SURFACEmicrosoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1microsoft windows 11 26h2microsoft windows server 2022microsoft windows server 2025
CVSS 5.5EPSS 0.36%
CVE-2026-97789HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft windows server 2022microsoft windows server 2025
CVSS 7.5EPSS 0.56%