L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n19 menções
medusalocker16 menções
BrainCipher12 menções
safepay8 menções
SilentRansomGroup7 menções
akira7 menções
play5 menções
Dark Project4 menções
qilin3 menções
genesis2 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
incransom1da9100e55aqf21eb651eNeaAL · Not Found · 2026-11-07
BrainCipherMutares.comDE · Manufacturing · 2026-11-06
SilentRansomGroupTucker EllisUS · Professional Services · 2026-11-06
SilentRansomGroupWachtell, Lipton, Rosen & KatzUS · Professional Services · 2026-11-06
SilentRansomGroupB... law— · Professional Services · 2026-11-06
direwolfAlgonomyUS · Technology · 2026-11-06
akiraHudson & Hudson SignProductsUS · Manufacturing · 2026-11-06
ShibaIstituto BorgoIT · Other · 2026-11-06
incransomhttps://www.sleep-clinic.ca/CA · Healthcare · 2026-11-06
akiraBoyle, Pecharich, Cline, Whittington andStallings— · Professional Services · 2026-11-06
N0nDompé Farmaceutici S.p.A.IT · Healthcare · 2026-11-06
N0nCogent Biosciences, Inc.US · Healthcare · 2026-11-06
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-83789HIGH

Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.77%
CVE-2026-83788MEDIUM

Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.

AFFECTED SURFACEProduct not specified
CVSS 4.6EPSS 0.46%
CVE-2026-83787MEDIUM

Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.29%
CVE-2026-83786MEDIUM

Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 4.7EPSS 0.36%
CVE-2026-83785HIGH

Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.29%
CVE-2026-83784HIGH

Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.95%
CVE-2026-83783HIGH

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-83782CRITICAL

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.89%
CVE-2026-83781HIGH

Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-83780CRITICAL

Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.96%
CVE-2026-83779HIGH

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-83778HIGH

Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.80%
CVE-2026-83777HIGH

Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.55%
CVE-2026-83776MEDIUM

Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack.

AFFECTED SURFACEProduct not specified
CVSS 6.8EPSS 0.45%
CVE-2026-83775HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.21%
CVE-2026-83774MEDIUM

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 4.7EPSS 0.38%
CVE-2026-83773MEDIUM

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.49%
CVE-2026-83771HIGH

Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.55%
CVE-2026-83770CRITICAL

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 1.00%
CVE-2026-83769HIGH

Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.37%
CVE-2026-83768HIGH

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.36%
CVE-2026-83767HIGH

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.24%
CVE-2026-83766MEDIUM

Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.

AFFECTED SURFACEProduct not specified
CVSS 4.2EPSS 0.36%
CVE-2026-83765MEDIUM

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.32%