L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n16 menções
medusalocker16 menções
BrainCipher12 menções
SilentRansomGroup8 menções
safepay8 menções
akira7 menções
play5 menções
Dark Project4 menções
qilin4 menções
genesis2 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
anubisKahler AutomationDE · Manufacturing · 2026-11-07
SilentRansomGroupBenesch LawUS · Professional Services · 2026-11-07
incransom1da9100e55aqf21eb651eNeaAL · Not Found · 2026-11-07
BrainCipherMutares.comDE · Manufacturing · 2026-11-06
SilentRansomGroupTucker EllisUS · Professional Services · 2026-11-06
SilentRansomGroupWachtell, Lipton, Rosen & KatzUS · Professional Services · 2026-11-06
SilentRansomGroupB... law— · Professional Services · 2026-11-06
direwolfAlgonomyUS · Technology · 2026-11-06
akiraHudson & Hudson SignProductsUS · Manufacturing · 2026-11-06
ShibaIstituto BorgoIT · Other · 2026-11-06
incransomhttps://www.sleep-clinic.ca/CA · Healthcare · 2026-11-06
akiraBoyle, Pecharich, Cline, Whittington andStallings— · Professional Services · 2026-11-06
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-72955HIGH

Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.28%
CVE-2026-72934HIGH

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.27%
CVE-2026-71347MEDIUM

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 6.4EPSS 0.22%
CVE-2026-70580HIGH

Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.30%
CVE-2026-70571HIGH

Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.93%
CVE-2026-70566HIGH

Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.34%
CVE-2026-70343HIGH

Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.80%
CVE-2026-70303HIGH

Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.38%
CVE-2026-70302HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.79%
CVE-2026-70301HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.79%
CVE-2026-70300CRITICAL

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 9.8EPSS 0.98%
CVE-2026-70299HIGH

Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.30%
CVE-2026-70298MEDIUM

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft sharepoint server
CVSS 6.5EPSS 1.09%
CVE-2026-70297HIGH

Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 1.02%
CVE-2026-70295MEDIUM

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.41%
CVE-2026-70294MEDIUM

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.41%
CVE-2026-70293MEDIUM

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.41%
CVE-2026-70292MEDIUM

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.41%
CVE-2026-70291CRITICAL

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 9.8EPSS 1.01%
CVE-2026-70288MEDIUM

Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.32%
CVE-2026-70287HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.79%
CVE-2026-70286HIGH

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.37%
CVE-2026-70285HIGH

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.34%
CVE-2026-70284MEDIUM

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.41%