L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n20 menções
medusalocker16 menções
BrainCipher12 menções
safepay8 menções
SilentRansomGroup7 menções
akira7 menções
play5 menções
Dark Project4 menções
qilin3 menções
genesis2 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
BrainCipherMutares.comDE · Manufacturing · 2026-11-06
SilentRansomGroupTucker EllisUS · Professional Services · 2026-11-06
SilentRansomGroupWachtell, Lipton, Rosen & KatzUS · Professional Services · 2026-11-06
SilentRansomGroupB... law— · Professional Services · 2026-11-06
direwolfAlgonomyUS · Technology · 2026-11-06
akiraHudson & Hudson SignProductsUS · Manufacturing · 2026-11-06
ShibaIstituto BorgoIT · Other · 2026-11-06
incransomhttps://www.sleep-clinic.ca/CA · Healthcare · 2026-11-06
akiraBoyle, Pecharich, Cline, Whittington andStallings— · Professional Services · 2026-11-06
N0nDompé Farmaceutici S.p.A.IT · Healthcare · 2026-11-06
N0nCogent Biosciences, Inc.US · Healthcare · 2026-11-06
N0nChartboost LLCUS · Technology · 2026-11-06
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-88132MEDIUM

Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEProduct not specified
CVSS 5.9EPSS 0.32%
CVE-2026-88130MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

AFFECTED SURFACEmicrosoft windows server 2012microsoft windows server 2016microsoft windows server 2019microsoft windows server 2022microsoft windows server 2025
CVSS 6.5EPSS 1.09%
CVE-2026-88129MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

AFFECTED SURFACEmicrosoft windows server 2012microsoft windows server 2016microsoft windows server 2019microsoft windows server 2022microsoft windows server 2025
CVSS 6.5EPSS 1.09%
CVE-2026-88128HIGH

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-88127HIGH

Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-88126HIGH

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-88125MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

AFFECTED SURFACEmicrosoft windows server 2012microsoft windows server 2016microsoft windows server 2019microsoft windows server 2022microsoft windows server 2025
CVSS 6.5EPSS 1.09%
CVE-2026-88124HIGH

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-88123MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

AFFECTED SURFACEmicrosoft windows server 2012microsoft windows server 2016microsoft windows server 2019microsoft windows server 2022microsoft windows server 2025
CVSS 6.5EPSS 1.09%
CVE-2026-88122MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

AFFECTED SURFACEmicrosoft windows server 2012microsoft windows server 2016microsoft windows server 2019microsoft windows server 2022microsoft windows server 2025
CVSS 6.5EPSS 0.79%
CVE-2026-88121HIGH

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.0EPSS 0.49%
CVE-2026-88120HIGH

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.69%
CVE-2026-88119HIGH

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.69%
CVE-2026-88118HIGH

Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.37%
CVE-2026-88117HIGH

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.55%
CVE-2026-88116HIGH

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 8.8EPSS 0.55%
CVE-2026-88115HIGH

Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.56%
CVE-2026-88114HIGH

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 8.8EPSS 0.55%
CVE-2026-88113HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.20%
CVE-2026-88112HIGH

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 8.8EPSS 0.55%
CVE-2026-88110HIGH

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-88109HIGH

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 7.8EPSS 0.30%
CVE-2026-88107HIGH

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.16%
CVE-2026-88106HIGH

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.20%