N0n20 menções
medusalocker16 menções
BrainCipher12 menções
safepay8 menções
SilentRansomGroup7 menções
akira7 menções
play5 menções
Dark Project4 menções
qilin3 menções
genesis2 menções
CVE KNOWLEDGE BASEIntelligence
Intelligence
Explorer.
Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.
// THREAT ACTIVITY
Grupos & malware emergente
Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.
Sem famílias correlacionadas no recorte recente.
BrainCipherMutares.comDE · Manufacturing · 2026-11-06
SilentRansomGroupTucker EllisUS · Professional Services · 2026-11-06
SilentRansomGroupWachtell, Lipton, Rosen & KatzUS · Professional Services · 2026-11-06
SilentRansomGroupB... law— · Professional Services · 2026-11-06
direwolfAlgonomyUS · Technology · 2026-11-06
akiraHudson & Hudson SignProductsUS · Manufacturing · 2026-11-06
ShibaIstituto BorgoIT · Other · 2026-11-06
incransomhttps://www.sleep-clinic.ca/CA · Healthcare · 2026-11-06
akiraBoyle, Pecharich, Cline, Whittington andStallings— · Professional Services · 2026-11-06
N0nDompé Farmaceutici S.p.A.IT · Healthcare · 2026-11-06
N0nCogent Biosciences, Inc.US · Healthcare · 2026-11-06
N0nChartboost LLCUS · Technology · 2026-11-06
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.
FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H
30947 REGISTROS ENCONTRADOSFEED 2026-11-03
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows server 2012microsoft windows server 2016microsoft windows server 2019microsoft windows server 2022
Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.
AFFECTED SURFACEmicrosoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1microsoft windows 11 26h2microsoft windows server 2022
Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally.
AFFECTED SURFACEmicrosoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
AFFECTED SURFACEProduct not specified
Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.
AFFECTED SURFACEmicrosoft windows server 2012microsoft windows server 2016microsoft windows server 2019microsoft windows server 2022microsoft windows server 2025
Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.
AFFECTED SURFACEProduct not specified
Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEProduct not specified
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
AFFECTED SURFACEProduct not specified
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEProduct not specified
Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.
AFFECTED SURFACEProduct not specified
Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
AFFECTED SURFACEProduct not specified
Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEProduct not specified
Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally.
AFFECTED SURFACEProduct not specified
Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.
AFFECTED SURFACEProduct not specified
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEProduct not specified
Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
AFFECTED SURFACEProduct not specified
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEProduct not specified
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEProduct not specified
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
AFFECTED SURFACEProduct not specified
Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally.
AFFECTED SURFACEProduct not specified