L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n16 menções
medusalocker16 menções
BrainCipher12 menções
SilentRansomGroup8 menções
safepay8 menções
akira7 menções
play5 menções
Dark Project4 menções
qilin4 menções
genesis2 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
anubisKahler AutomationDE · Manufacturing · 2026-11-07
SilentRansomGroupBenesch LawUS · Professional Services · 2026-11-07
incransom1da9100e55aqf21eb651eNeaAL · Not Found · 2026-11-07
BrainCipherMutares.comDE · Manufacturing · 2026-11-06
SilentRansomGroupTucker EllisUS · Professional Services · 2026-11-06
SilentRansomGroupWachtell, Lipton, Rosen & KatzUS · Professional Services · 2026-11-06
SilentRansomGroupB... law— · Professional Services · 2026-11-06
direwolfAlgonomyUS · Technology · 2026-11-06
akiraHudson & Hudson SignProductsUS · Manufacturing · 2026-11-06
ShibaIstituto BorgoIT · Other · 2026-11-06
incransomhttps://www.sleep-clinic.ca/CA · Healthcare · 2026-11-06
akiraBoyle, Pecharich, Cline, Whittington andStallings— · Professional Services · 2026-11-06
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-70282HIGH

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.79%
CVE-2026-70281HIGH

Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 7.5EPSS 0.99%
CVE-2026-70280MEDIUM

Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.

AFFECTED SURFACEProduct not specified
CVSS 4.4EPSS 0.38%
CVE-2026-70279CRITICAL

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

AFFECTED SURFACEProduct not specified
CVSS 9.3EPSS 0.86%
CVE-2026-70278HIGH

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.27%
CVE-2026-70277MEDIUM

Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.55%
CVE-2026-70276HIGH

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 7.0EPSS 0.25%
CVE-2026-70275HIGH

Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.84%
CVE-2026-70274HIGH

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-70273HIGH

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.28%
CVE-2026-70272HIGH

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-70271HIGH

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.30%
CVE-2026-70270MEDIUM

Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.40%
CVE-2026-70269HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 8.1EPSS 0.70%
CVE-2026-70268HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.79%
CVE-2026-70267HIGH

Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft sharepoint server
CVSS 7.2EPSS 0.90%
CVE-2026-70266HIGH

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

AFFECTED SURFACEmicrosoft sharepoint server
CVSS 8.8EPSS 0.95%
CVE-2026-70264MEDIUM

Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.43%
CVE-2026-70263MEDIUM

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 6.5EPSS 0.89%
CVE-2026-70262HIGH

Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.84%
CVE-2026-70261MEDIUM

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.49%
CVE-2026-70260MEDIUM

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.49%
CVE-2026-70259MEDIUM

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft sharepoint server
CVSS 6.5EPSS 0.81%
CVE-2026-70258HIGH

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.84%