L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n16 menções
medusalocker16 menções
BrainCipher12 menções
SilentRansomGroup8 menções
safepay8 menções
akira7 menções
play5 menções
Dark Project4 menções
qilin4 menções
genesis2 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
anubisKahler AutomationDE · Manufacturing · 2026-11-07
SilentRansomGroupBenesch LawUS · Professional Services · 2026-11-07
incransom1da9100e55aqf21eb651eNeaAL · Not Found · 2026-11-07
BrainCipherMutares.comDE · Manufacturing · 2026-11-06
SilentRansomGroupTucker EllisUS · Professional Services · 2026-11-06
SilentRansomGroupWachtell, Lipton, Rosen & KatzUS · Professional Services · 2026-11-06
SilentRansomGroupB... law— · Professional Services · 2026-11-06
direwolfAlgonomyUS · Technology · 2026-11-06
akiraHudson & Hudson SignProductsUS · Manufacturing · 2026-11-06
ShibaIstituto BorgoIT · Other · 2026-11-06
incransomhttps://www.sleep-clinic.ca/CA · Healthcare · 2026-11-06
akiraBoyle, Pecharich, Cline, Whittington andStallings— · Professional Services · 2026-11-06
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-83652HIGH

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-83651MEDIUM

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.94%
CVE-2026-83650HIGH

Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-83649MEDIUM

Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 1.09%
CVE-2026-83648MEDIUM

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 1.09%
CVE-2026-83647HIGH

Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 1.15%
CVE-2026-83646MEDIUM

Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.

AFFECTED SURFACEProduct not specified
CVSS 4.8EPSS 0.37%
CVE-2026-83645HIGH

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 1.10%
CVE-2026-83644HIGH

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-83643HIGH

Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.84%
CVE-2026-83642HIGH

Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 8.8EPSS 0.82%
CVE-2026-83641HIGH

Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-83640HIGH

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-83639HIGH

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-83638HIGH

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-83637HIGH

Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.34%
CVE-2026-83636MEDIUM

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.39%
CVE-2026-83635HIGH

Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.

AFFECTED SURFACEmicrosoft windows server 2012microsoft windows server 2016microsoft windows server 2019microsoft windows server 2022microsoft windows server 2025
CVSS 7.5EPSS 1.17%
CVE-2026-83634HIGH

Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-83588HIGH

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-83587HIGH

Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-83586HIGH

Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.28%
CVE-2026-83585HIGH

Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-83584HIGH

Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%