L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n19 menções
medusalocker16 menções
BrainCipher12 menções
safepay8 menções
SilentRansomGroup7 menções
akira7 menções
play5 menções
Dark Project4 menções
qilin3 menções
genesis2 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
incransom1da9100e55aqf21eb651eNeaAL · Not Found · 2026-11-07
BrainCipherMutares.comDE · Manufacturing · 2026-11-06
SilentRansomGroupTucker EllisUS · Professional Services · 2026-11-06
SilentRansomGroupWachtell, Lipton, Rosen & KatzUS · Professional Services · 2026-11-06
SilentRansomGroupB... law— · Professional Services · 2026-11-06
direwolfAlgonomyUS · Technology · 2026-11-06
akiraHudson & Hudson SignProductsUS · Manufacturing · 2026-11-06
ShibaIstituto BorgoIT · Other · 2026-11-06
incransomhttps://www.sleep-clinic.ca/CA · Healthcare · 2026-11-06
akiraBoyle, Pecharich, Cline, Whittington andStallings— · Professional Services · 2026-11-06
N0nDompé Farmaceutici S.p.A.IT · Healthcare · 2026-11-06
N0nCogent Biosciences, Inc.US · Healthcare · 2026-11-06
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-83707HIGH

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-83706MEDIUM

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 6.7EPSS 0.33%
CVE-2026-83705MEDIUM

Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.47%
CVE-2026-83704HIGH

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.42%
CVE-2026-83703MEDIUM

Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.59%
CVE-2026-83702HIGH

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-83701HIGH

Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-83700HIGH

Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-83699HIGH

Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.37%
CVE-2026-83698HIGH

Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-83697MEDIUM

Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

AFFECTED SURFACEProduct not specified
CVSS 4.7EPSS 0.20%
CVE-2026-83696HIGH

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-83695MEDIUM

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.41%
CVE-2026-83694HIGH

Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-83693CRITICAL

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 1.00%
CVE-2026-83692HIGH

Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-83691HIGH

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-83690HIGH

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.34%
CVE-2026-83689HIGH

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-83688HIGH

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.84%
CVE-2026-83687HIGH

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-83686MEDIUM

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.41%
CVE-2026-83685MEDIUM

Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 1.14%
CVE-2026-83683MEDIUM

Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 1.13%