L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n20 menções
medusalocker17 menções
BrainCipher11 menções
akira8 menções
safepay8 menções
Aoqin5 menções
play5 menções
Dark Project4 menções
SilentRansomGroup4 menções
qilin3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
direwolfAlgonomyUS · Technology · 2026-11-06
akiraHudson & Hudson SignProductsUS · Manufacturing · 2026-11-06
ShibaIstituto BorgoIT · Other · 2026-11-06
akiraBoyle, Pecharich, Cline, Whittington andStallings— · Professional Services · 2026-11-06
N0nDompé Farmaceutici S.p.A.IT · Healthcare · 2026-11-06
N0nCogent Biosciences, Inc.US · Healthcare · 2026-11-06
N0nChartboost LLCUS · Technology · 2026-11-06
N0nCentrepointSA · Energy & Utilities · 2026-11-06
N0nResource ConsultantsUS · Professional Services · 2026-11-06
OBSOFTCompany #6— · Not Found · 2026-11-06
N0nMax FashionAE · Retail & E-Commerce · 2026-11-06
N0nHallmark Cards, Inc.US · Retail & E-Commerce · 2026-11-06
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-96855MEDIUM

Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

AFFECTED SURFACEmicrosoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2
CVSS 5.5EPSS 0.28%
CVE-2026-96854MEDIUM

Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 5.5EPSS 0.30%
CVE-2026-96853MEDIUM

Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 4.7EPSS 0.18%
CVE-2026-96852HIGH

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.0EPSS 0.25%
CVE-2026-96851MEDIUM

Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 5.5EPSS 0.39%
CVE-2026-96850MEDIUM

Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.

AFFECTED SURFACEmicrosoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2
CVSS 5.5EPSS 0.39%
CVE-2026-96849MEDIUM

Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

AFFECTED SURFACEmicrosoft windows 11 26h1
CVSS 5.5EPSS 0.39%
CVE-2026-96848MEDIUM

Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

AFFECTED SURFACEmicrosoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows server 2019microsoft windows server 2022
CVSS 5.5EPSS 0.39%
CVE-2026-96847HIGH

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.8EPSS 0.31%
CVE-2026-96846MEDIUM

Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 5.5EPSS 0.30%
CVE-2026-96844HIGH

Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 8.0EPSS 0.47%
CVE-2026-96843HIGH

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.8EPSS 0.31%
CVE-2026-96325HIGH

Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.5EPSS 0.82%
CVE-2026-96324HIGH

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.8EPSS 0.31%
CVE-2026-96323HIGH

Use after free in Windows Update allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1
CVSS 7.0EPSS 0.25%
CVE-2026-96322HIGH

Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.0EPSS 0.20%
CVE-2026-96321MEDIUM

Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.

AFFECTED SURFACEmicrosoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1
CVSS 5.5EPSS 0.39%
CVE-2026-96320CRITICAL

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows server 2012microsoft windows server 2016microsoft windows server 2019microsoft windows server 2022
CVSS 9.8EPSS 0.91%
CVE-2026-96319HIGH

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1
CVSS 7.0EPSS 0.25%
CVE-2026-96318HIGH

Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.8EPSS 0.31%
CVE-2026-96317HIGH

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2
CVSS 7.8EPSS 0.25%
CVE-2026-96316MEDIUM

Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 5.5EPSS 0.28%
CVE-2026-96315MEDIUM

Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 5.5EPSS 0.28%
CVE-2026-96314MEDIUM

Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 5.5EPSS 0.39%