L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
medusalocker17 menções
N0n15 menções
BrainCipher11 menções
safepay8 menções
Aoqin5 menções
incransom5 menções
play5 menções
Booba Project4 menções
Dark Project4 menções
SilentRansomGroup3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
AoqinSistelBR · Technology · 2026-11-05
everstakene*****h.com— · Not Found · 2026-11-05
PixelLeaksDisclosed— · Other · 2026-11-05
Dark ProjectCustom BakehouseUS · Retail & E-Commerce · 2026-11-05
N0nDelta Dental of MissouriUS · Healthcare · 2026-11-05
N0nThe Container StoreUS · Retail & E-Commerce · 2026-11-05
BYODFirst and Final Warning - IHG Hotels & Resorts (Estate)— · Hospitality · 2026-11-05
qilinCalvary Christian CollegeAU · Education · 2026-11-05
AuditTeamkx***omCN · Technology · 2026-11-05
medusalockerMsnUS · Technology · 2026-11-04
medusalockerbaiapai— · Technology · 2026-11-04
medusalockerVinitglovesIN · Manufacturing · 2026-11-04
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-97788HIGH

Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.5EPSS 0.68%
CVE-2026-97787HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1microsoft windows 11 26h2microsoft windows server 2022
CVSS 7.0EPSS 0.20%
CVE-2026-97783HIGH

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

AFFECTED SURFACEmicrosoft sharepoint server
CVSS 8.1EPSS 0.50%
CVE-2026-97782MEDIUM

Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.

AFFECTED SURFACEmicrosoft sharepoint server
CVSS 6.8EPSS 0.53%
CVE-2026-97781HIGH

Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 apps
CVSS 8.8EPSS 0.76%
CVE-2026-97780HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024microsoft office online server
CVSS 8.8EPSS 0.78%
CVE-2026-97779MEDIUM

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024microsoft office online server
CVSS 6.5EPSS 0.83%
CVE-2026-97778HIGH

Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024microsoft office online server
CVSS 8.8EPSS 0.59%
CVE-2026-97777HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024microsoft office online server
CVSS 8.8EPSS 0.72%
CVE-2026-97776HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024microsoft office online server
CVSS 8.8EPSS 0.78%
CVE-2026-97775HIGH

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024microsoft office online server
CVSS 8.8EPSS 0.72%
CVE-2026-97774HIGH

Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft 365 apps
CVSS 7.0EPSS 0.18%
CVE-2026-97773HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024microsoft office online server
CVSS 8.8EPSS 0.72%
CVE-2026-97772HIGH

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024microsoft office online server
CVSS 8.8EPSS 0.72%
CVE-2026-97771HIGH

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024microsoft office online server
CVSS 8.8EPSS 0.72%
CVE-2026-97770HIGH

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024microsoft office online server
CVSS 8.8EPSS 0.72%
CVE-2026-97769HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024microsoft office online server
CVSS 8.8EPSS 0.76%
CVE-2026-97768HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024microsoft office online server
CVSS 8.8EPSS 0.72%
CVE-2026-97767HIGH

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024microsoft office online server
CVSS 8.8EPSS 0.59%
CVE-2026-97766HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024microsoft office online server
CVSS 8.8EPSS 0.72%
CVE-2026-97765HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024microsoft office online server
CVSS 8.8EPSS 0.78%
CVE-2026-97763HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024microsoft office online server
CVSS 8.8EPSS 0.72%
CVE-2026-97762HIGH

Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024microsoft office online server
CVSS 8.8EPSS 0.72%
CVE-2026-97761HIGH

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.78%