N0n20 menções
medusalocker16 menções
BrainCipher12 menções
safepay8 menções
SilentRansomGroup7 menções
akira7 menções
play5 menções
Dark Project4 menções
qilin3 menções
genesis2 menções
CVE KNOWLEDGE BASEIntelligence
Intelligence
Explorer.
Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.
// THREAT ACTIVITY
Grupos & malware emergente
Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.
Sem famílias correlacionadas no recorte recente.
BrainCipherMutares.comDE · Manufacturing · 2026-11-06
SilentRansomGroupTucker EllisUS · Professional Services · 2026-11-06
SilentRansomGroupWachtell, Lipton, Rosen & KatzUS · Professional Services · 2026-11-06
SilentRansomGroupB... law— · Professional Services · 2026-11-06
direwolfAlgonomyUS · Technology · 2026-11-06
akiraHudson & Hudson SignProductsUS · Manufacturing · 2026-11-06
ShibaIstituto BorgoIT · Other · 2026-11-06
incransomhttps://www.sleep-clinic.ca/CA · Healthcare · 2026-11-06
akiraBoyle, Pecharich, Cline, Whittington andStallings— · Professional Services · 2026-11-06
N0nDompé Farmaceutici S.p.A.IT · Healthcare · 2026-11-06
N0nCogent Biosciences, Inc.US · Healthcare · 2026-11-06
N0nChartboost LLCUS · Technology · 2026-11-06
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.
FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H
30947 REGISTROS ENCONTRADOSFEED 2026-11-03
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
AFFECTED SURFACEmicrosoft windows server 2019microsoft windows server 2022microsoft windows server 2025
Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1microsoft windows 11 26h2microsoft windows server 2025
Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
AFFECTED SURFACEmicrosoft windows server 2019microsoft windows server 2022microsoft windows server 2025
Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network.
AFFECTED SURFACEProduct not specified
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.
AFFECTED SURFACEmicrosoft asp.net coremicrosoft visual studio 2022microsoft visual studio 2026
Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1microsoft windows 11 26h2
Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.
AFFECTED SURFACEmicrosoft configuration manager 2503microsoft configuration manager 2509microsoft configuration manager 2603
Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1microsoft windows 11 26h2
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1
Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2
Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h2microsoft windows server 2022microsoft windows server 2025
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network.
AFFECTED SURFACEmicrosoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2