L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n20 menções
medusalocker17 menções
BrainCipher11 menções
akira8 menções
safepay8 menções
Aoqin5 menções
play5 menções
Dark Project4 menções
SilentRansomGroup4 menções
qilin3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
akiraHudson & Hudson SignProductsUS · Manufacturing · 2026-11-06
ShibaIstituto BorgoIT · Other · 2026-11-06
akiraBoyle, Pecharich, Cline, Whittington andStallings— · Professional Services · 2026-11-06
N0nDompé Farmaceutici S.p.A.IT · Healthcare · 2026-11-06
N0nCogent Biosciences, Inc.US · Healthcare · 2026-11-06
N0nChartboost LLCUS · Technology · 2026-11-06
N0nCentrepointSA · Energy & Utilities · 2026-11-06
N0nResource ConsultantsUS · Professional Services · 2026-11-06
N0nMax FashionAE · Retail & E-Commerce · 2026-11-06
N0nHallmark Cards, Inc.US · Retail & E-Commerce · 2026-11-06
N0nScry AnalyticsUS · Technology · 2026-11-06
qilinRotstein & ShiffmanIL · Professional Services · 2026-11-06
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-97016CRITICAL

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 9.8EPSS 0.98%
CVE-2026-97014MEDIUM

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 5.5EPSS 0.50%
CVE-2026-97012HIGH

Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.72%
CVE-2026-97011HIGH

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.72%
CVE-2026-97010HIGH

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024microsoft office online server
CVSS 8.8EPSS 0.72%
CVE-2026-97009HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 7.8EPSS 0.32%
CVE-2026-97008HIGH

Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024microsoft office online server
CVSS 8.8EPSS 0.72%
CVE-2026-97007HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024microsoft office online server
CVSS 8.8EPSS 0.72%
CVE-2026-97005MEDIUM

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 5.5EPSS 0.38%
CVE-2026-97004HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024microsoft office online server
CVSS 8.8EPSS 0.72%
CVE-2026-97003HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024microsoft office online server
CVSS 8.8EPSS 0.72%
CVE-2026-97001HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 7.8EPSS 0.42%
CVE-2026-96997HIGH

Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 7.8EPSS 0.30%
CVE-2026-96996HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 7.8EPSS 0.32%
CVE-2026-96995HIGH

Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 7.8EPSS 0.30%
CVE-2026-96960HIGH

Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.

AFFECTED SURFACEmicrosoft .netapple macoslinux linux kernelmicrosoft windowsmicrosoft .net frameworkmicrosoft windows 11 26h1
CVSS 7.5EPSS 1.03%
CVE-2026-96959HIGH

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

AFFECTED SURFACEmicrosoft .netapple macoslinux linux kernelmicrosoft windowsmicrosoft .net frameworkmicrosoft windows 11 26h1
CVSS 7.5EPSS 0.75%
CVE-2026-96958HIGH

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

AFFECTED SURFACEmicrosoft .netapple macoslinux linux kernelmicrosoft windowsmicrosoft .net frameworkmicrosoft windows 11 26h1
CVSS 7.5EPSS 1.03%
CVE-2026-96957HIGH

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

AFFECTED SURFACEmicrosoft .netapple macoslinux linux kernelmicrosoft windowsmicrosoft visual studio 2022microsoft visual studio 2026
CVSS 8.8EPSS 0.45%
CVE-2026-96953HIGH

Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.8EPSS 0.24%
CVE-2026-96952HIGH

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2
CVSS 8.8EPSS 0.78%
CVE-2026-96951HIGH

Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

AFFECTED SURFACEmicrosoft outlook webmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2
CVSS 8.8EPSS 1.51%
CVE-2026-96950HIGH

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.8EPSS 0.31%
CVE-2026-96949HIGH

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.0EPSS 0.19%