L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n20 menções
medusalocker16 menções
BrainCipher12 menções
safepay8 menções
SilentRansomGroup7 menções
akira7 menções
play5 menções
Dark Project4 menções
qilin3 menções
genesis2 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
BrainCipherMutares.comDE · Manufacturing · 2026-11-06
SilentRansomGroupTucker EllisUS · Professional Services · 2026-11-06
SilentRansomGroupWachtell, Lipton, Rosen & KatzUS · Professional Services · 2026-11-06
SilentRansomGroupB... law— · Professional Services · 2026-11-06
direwolfAlgonomyUS · Technology · 2026-11-06
akiraHudson & Hudson SignProductsUS · Manufacturing · 2026-11-06
ShibaIstituto BorgoIT · Other · 2026-11-06
incransomhttps://www.sleep-clinic.ca/CA · Healthcare · 2026-11-06
akiraBoyle, Pecharich, Cline, Whittington andStallings— · Professional Services · 2026-11-06
N0nDompé Farmaceutici S.p.A.IT · Healthcare · 2026-11-06
N0nCogent Biosciences, Inc.US · Healthcare · 2026-11-06
N0nChartboost LLCUS · Technology · 2026-11-06
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-85861HIGH

Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.24%
CVE-2026-85860HIGH

Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.24%
CVE-2026-85859MEDIUM

Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.79%
CVE-2026-85858HIGH

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.25%
CVE-2026-85857MEDIUM

Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.47%
CVE-2026-85856HIGH

Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.36%
CVE-2026-85855HIGH

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.29%
CVE-2026-85854HIGH

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-85853HIGH

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-85852MEDIUM

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.40%
CVE-2026-85851HIGH

Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.33%
CVE-2026-85850HIGH

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.34%
CVE-2026-85849HIGH

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.41%
CVE-2026-85848HIGH

Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.37%
CVE-2026-85847MEDIUM

Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.67%
CVE-2026-85846HIGH

Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.20%
CVE-2026-85843HIGH

Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.37%
CVE-2026-85842HIGH

Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-85841MEDIUM

Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 6.6EPSS 0.65%
CVE-2026-85840MEDIUM

Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.95%
CVE-2026-85837HIGH

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1microsoft windows 11 26h2microsoft windows server 2025
CVSS 7.8EPSS 0.31%
CVE-2026-85836HIGH

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1microsoft windows 11 26h2microsoft windows server 2025
CVSS 7.8EPSS 0.31%
CVE-2026-85835MEDIUM

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.40%
CVE-2026-85834HIGH

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%