L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n20 menções
medusalocker16 menções
BrainCipher12 menções
safepay8 menções
SilentRansomGroup7 menções
akira7 menções
play5 menções
Dark Project4 menções
qilin3 menções
genesis2 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
BrainCipherMutares.comDE · Manufacturing · 2026-11-06
SilentRansomGroupTucker EllisUS · Professional Services · 2026-11-06
SilentRansomGroupWachtell, Lipton, Rosen & KatzUS · Professional Services · 2026-11-06
SilentRansomGroupB... law— · Professional Services · 2026-11-06
direwolfAlgonomyUS · Technology · 2026-11-06
akiraHudson & Hudson SignProductsUS · Manufacturing · 2026-11-06
ShibaIstituto BorgoIT · Other · 2026-11-06
incransomhttps://www.sleep-clinic.ca/CA · Healthcare · 2026-11-06
akiraBoyle, Pecharich, Cline, Whittington andStallings— · Professional Services · 2026-11-06
N0nDompé Farmaceutici S.p.A.IT · Healthcare · 2026-11-06
N0nCogent Biosciences, Inc.US · Healthcare · 2026-11-06
N0nChartboost LLCUS · Technology · 2026-11-06
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-83866HIGH

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-83865MEDIUM

Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.

AFFECTED SURFACEProduct not specified
CVSS 4.7EPSS 0.27%
CVE-2026-83864MEDIUM

Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.34%
CVE-2026-83863HIGH

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-83862CRITICAL

Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.65%
CVE-2026-83861HIGH

Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-83860HIGH

Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 1.15%
CVE-2026-83859HIGH

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-83857HIGH

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-83856HIGH

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.57%
CVE-2026-83855HIGH

Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 1.20%
CVE-2026-83854MEDIUM

Improper access control in Windows Notification allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.26%
CVE-2026-83853HIGH

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-83852HIGH

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.20%
CVE-2026-83851HIGH

Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.61%
CVE-2026-83850HIGH

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-83849MEDIUM

Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.40%
CVE-2026-83848HIGH

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.37%
CVE-2026-83847HIGH

Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.31%
CVE-2026-83846HIGH

Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.24%
CVE-2026-83845HIGH

Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.

AFFECTED SURFACEProduct not specified
CVSS 8.4EPSS 0.29%
CVE-2026-83844HIGH

Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.65%
CVE-2026-83843HIGH

Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 1.15%
CVE-2026-83842HIGH

Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.27%