L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n16 menções
medusalocker16 menções
BrainCipher12 menções
SilentRansomGroup8 menções
safepay8 menções
akira7 menções
play5 menções
Dark Project4 menções
qilin4 menções
genesis2 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
anubisKahler AutomationDE · Manufacturing · 2026-11-07
SilentRansomGroupBenesch LawUS · Professional Services · 2026-11-07
incransom1da9100e55aqf21eb651eNeaAL · Not Found · 2026-11-07
BrainCipherMutares.comDE · Manufacturing · 2026-11-06
SilentRansomGroupTucker EllisUS · Professional Services · 2026-11-06
SilentRansomGroupWachtell, Lipton, Rosen & KatzUS · Professional Services · 2026-11-06
SilentRansomGroupB... law— · Professional Services · 2026-11-06
direwolfAlgonomyUS · Technology · 2026-11-06
akiraHudson & Hudson SignProductsUS · Manufacturing · 2026-11-06
ShibaIstituto BorgoIT · Other · 2026-11-06
incransomhttps://www.sleep-clinic.ca/CA · Healthcare · 2026-11-06
akiraBoyle, Pecharich, Cline, Whittington andStallings— · Professional Services · 2026-11-06
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-70140HIGH

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.27%
CVE-2026-70139HIGH

Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.34%
CVE-2026-70138HIGH

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.34%
CVE-2026-70137MEDIUM

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.36%
CVE-2026-70136HIGH

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-70135MEDIUM

Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.41%
CVE-2026-70134HIGH

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.27%
CVE-2026-70133HIGH

Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 1.15%
CVE-2026-70132HIGH

Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.36%
CVE-2026-70131HIGH

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.44%
CVE-2026-70128MEDIUM

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.38%
CVE-2026-70127HIGH

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows server 2012microsoft windows server 2016microsoft windows server 2019microsoft windows server 2022
CVSS 8.1EPSS 0.71%
CVE-2026-70126HIGH

Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.47%
CVE-2026-70123HIGH

Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.31%
CVE-2026-70122MEDIUM

Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.27%
CVE-2026-70121HIGH

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.34%
CVE-2026-70119MEDIUM

Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft windows server 2022microsoft windows server 2025
CVSS 6.5EPSS 1.14%
CVE-2026-70118HIGH

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.27%
CVE-2026-70117HIGH

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.36%
CVE-2026-70116MEDIUM

Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack.

AFFECTED SURFACEProduct not specified
CVSS 4.2EPSS 0.32%
CVE-2026-70115HIGH

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-70114HIGH

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.34%
CVE-2026-70113HIGH

Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.34%
CVE-2026-70112HIGH

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.34%