L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n20 menções
medusalocker16 menções
BrainCipher12 menções
safepay8 menções
SilentRansomGroup7 menções
akira7 menções
play5 menções
Dark Project4 menções
qilin3 menções
genesis2 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
BrainCipherMutares.comDE · Manufacturing · 2026-11-06
SilentRansomGroupTucker EllisUS · Professional Services · 2026-11-06
SilentRansomGroupWachtell, Lipton, Rosen & KatzUS · Professional Services · 2026-11-06
SilentRansomGroupB... law— · Professional Services · 2026-11-06
direwolfAlgonomyUS · Technology · 2026-11-06
akiraHudson & Hudson SignProductsUS · Manufacturing · 2026-11-06
ShibaIstituto BorgoIT · Other · 2026-11-06
incransomhttps://www.sleep-clinic.ca/CA · Healthcare · 2026-11-06
akiraBoyle, Pecharich, Cline, Whittington andStallings— · Professional Services · 2026-11-06
N0nDompé Farmaceutici S.p.A.IT · Healthcare · 2026-11-06
N0nCogent Biosciences, Inc.US · Healthcare · 2026-11-06
N0nChartboost LLCUS · Technology · 2026-11-06
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-88158MEDIUM

Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.29%
CVE-2026-88157HIGH

Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.53%
CVE-2026-88156CRITICAL

Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 9.8EPSS 0.98%
CVE-2026-88155HIGH

Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft sharepoint server
CVSS 8.8EPSS 0.82%
CVE-2026-88154MEDIUM

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 6.5EPSS 0.83%
CVE-2026-88153MEDIUM

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 6.5EPSS 0.83%
CVE-2026-88152HIGH

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.36%
CVE-2026-88151MEDIUM

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 6.5EPSS 0.83%
CVE-2026-88150HIGH

Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.72%
CVE-2026-88149HIGH

Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.20%
CVE-2026-88147HIGH

Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.34%
CVE-2026-88146HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.19%
CVE-2026-88145HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.72%
CVE-2026-88144HIGH

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.78%
CVE-2026-88143MEDIUM

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 6.7EPSS 0.26%
CVE-2026-88142HIGH

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.85%
CVE-2026-88141HIGH

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-88140MEDIUM

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.40%
CVE-2026-88139HIGH

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.20%
CVE-2026-88137MEDIUM

Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.95%
CVE-2026-88136HIGH

Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.95%
CVE-2026-88135HIGH

Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.28%
CVE-2026-88134HIGH

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-88133HIGH

Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.41%