L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n20 menções
medusalocker17 menções
BrainCipher11 menções
akira8 menções
safepay8 menções
Aoqin5 menções
play5 menções
Dark Project4 menções
SilentRansomGroup4 menções
qilin3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
direwolfAlgonomyUS · Technology · 2026-11-06
akiraHudson & Hudson SignProductsUS · Manufacturing · 2026-11-06
ShibaIstituto BorgoIT · Other · 2026-11-06
akiraBoyle, Pecharich, Cline, Whittington andStallings— · Professional Services · 2026-11-06
N0nDompé Farmaceutici S.p.A.IT · Healthcare · 2026-11-06
N0nCogent Biosciences, Inc.US · Healthcare · 2026-11-06
N0nChartboost LLCUS · Technology · 2026-11-06
N0nCentrepointSA · Energy & Utilities · 2026-11-06
N0nResource ConsultantsUS · Professional Services · 2026-11-06
OBSOFTCompany #6— · Not Found · 2026-11-06
N0nMax FashionAE · Retail & E-Commerce · 2026-11-06
N0nHallmark Cards, Inc.US · Retail & E-Commerce · 2026-11-06
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-88226MEDIUM

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 4.6EPSS 0.45%
CVE-2026-88219HIGH

Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 8.8EPSS 0.75%
CVE-2026-88210HIGH

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 7.8EPSS 0.42%
CVE-2026-88209MEDIUM

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

AFFECTED SURFACEmicrosoft sharepoint server
CVSS 4.6EPSS 0.36%
CVE-2026-88208MEDIUM

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

AFFECTED SURFACEmicrosoft sharepoint server
CVSS 4.6EPSS 0.27%
CVE-2026-88207HIGH

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 7.5EPSS 0.46%
CVE-2026-88206HIGH

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

AFFECTED SURFACEmicrosoft sharepoint server
CVSS 7.5EPSS 0.51%
CVE-2026-88204HIGH

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

AFFECTED SURFACEmicrosoft sharepoint server
CVSS 7.3EPSS 0.62%
CVE-2026-88203MEDIUM

Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 6.5EPSS 0.83%
CVE-2026-88202HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.72%
CVE-2026-88201MEDIUM

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 6.5EPSS 0.63%
CVE-2026-88200HIGH

Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

AFFECTED SURFACEmicrosoft sharepoint server
CVSS 8.8EPSS 0.70%
CVE-2026-88198HIGH

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

AFFECTED SURFACEmicrosoft sharepoint server
CVSS 8.8EPSS 0.70%
CVE-2026-88197HIGH

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.52%
CVE-2026-88196HIGH

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.72%
CVE-2026-88195MEDIUM

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 6.5EPSS 0.63%
CVE-2026-88194HIGH

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.8EPSS 0.31%
CVE-2026-88193HIGH

Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.8EPSS 0.30%
CVE-2026-88192MEDIUM

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 6.5EPSS 0.83%
CVE-2026-88191HIGH

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.8EPSS 0.37%
CVE-2026-88190MEDIUM

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 6.5EPSS 0.83%
CVE-2026-88189HIGH

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2
CVSS 7.8EPSS 0.24%
CVE-2026-88188HIGH

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.8EPSS 0.31%
CVE-2026-88186HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.72%