L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n20 menções
medusalocker17 menções
BrainCipher11 menções
akira8 menções
safepay8 menções
Aoqin5 menções
play5 menções
Dark Project4 menções
SilentRansomGroup4 menções
qilin3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
direwolfAlgonomyUS · Technology · 2026-11-06
akiraHudson & Hudson SignProductsUS · Manufacturing · 2026-11-06
ShibaIstituto BorgoIT · Other · 2026-11-06
akiraBoyle, Pecharich, Cline, Whittington andStallings— · Professional Services · 2026-11-06
N0nDompé Farmaceutici S.p.A.IT · Healthcare · 2026-11-06
N0nCogent Biosciences, Inc.US · Healthcare · 2026-11-06
N0nChartboost LLCUS · Technology · 2026-11-06
N0nCentrepointSA · Energy & Utilities · 2026-11-06
N0nResource ConsultantsUS · Professional Services · 2026-11-06
OBSOFTCompany #6— · Not Found · 2026-11-06
N0nMax FashionAE · Retail & E-Commerce · 2026-11-06
N0nHallmark Cards, Inc.US · Retail & E-Commerce · 2026-11-06
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-96313HIGH

Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2
CVSS 7.0EPSS 0.22%
CVE-2026-96312HIGH

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.8EPSS 0.31%
CVE-2026-96311MEDIUM

Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 5.5EPSS 0.28%
CVE-2026-96310HIGH

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1
CVSS 7.0EPSS 0.25%
CVE-2026-96309HIGH

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1
CVSS 7.8EPSS 0.31%
CVE-2026-96308HIGH

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.8EPSS 0.31%
CVE-2026-96307HIGH

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.0EPSS 0.20%
CVE-2026-96306HIGH

Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.8EPSS 0.24%
CVE-2026-96305HIGH

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.0EPSS 0.25%
CVE-2026-96304HIGH

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1
CVSS 7.0EPSS 0.25%
CVE-2026-96303MEDIUM

Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.

AFFECTED SURFACEmicrosoft powershell
CVSS 6.5EPSS 0.59%
CVE-2026-96302HIGH

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.0EPSS 0.25%
CVE-2026-96301HIGH

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1
CVSS 7.0EPSS 0.25%
CVE-2026-96300MEDIUM

Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 5.9EPSS 0.82%
CVE-2026-96254HIGH

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1
CVSS 7.0EPSS 0.25%
CVE-2026-96253HIGH

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1
CVSS 7.0EPSS 0.25%
CVE-2026-96252CRITICAL

Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows server 2012microsoft windows server 2016microsoft windows server 2019microsoft windows server 2022
CVSS 9.1EPSS 0.47%
CVE-2026-96251HIGH

Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft powershell
CVSS 8.8EPSS 0.52%
CVE-2026-96250HIGH

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1
CVSS 7.0EPSS 0.25%
CVE-2026-96249HIGH

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1microsoft windows 11 26h2microsoft windows server 2025
CVSS 7.8EPSS 0.31%
CVE-2026-96248HIGH

Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows server 2016microsoft windows server 2019microsoft windows server 2022microsoft windows server 2025
CVSS 7.5EPSS 1.12%
CVE-2026-96247MEDIUM

Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 5.5EPSS 0.39%
CVE-2026-96246HIGH

Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.5EPSS 0.98%
CVE-2026-96245HIGH

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.5EPSS 0.98%