L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n16 menções
medusalocker16 menções
BrainCipher12 menções
SilentRansomGroup8 menções
safepay8 menções
akira7 menções
play5 menções
Dark Project4 menções
qilin4 menções
genesis2 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
anubisKahler AutomationDE · Manufacturing · 2026-11-07
SilentRansomGroupBenesch LawUS · Professional Services · 2026-11-07
incransom1da9100e55aqf21eb651eNeaAL · Not Found · 2026-11-07
BrainCipherMutares.comDE · Manufacturing · 2026-11-06
SilentRansomGroupTucker EllisUS · Professional Services · 2026-11-06
SilentRansomGroupWachtell, Lipton, Rosen & KatzUS · Professional Services · 2026-11-06
SilentRansomGroupB... law— · Professional Services · 2026-11-06
direwolfAlgonomyUS · Technology · 2026-11-06
akiraHudson & Hudson SignProductsUS · Manufacturing · 2026-11-06
ShibaIstituto BorgoIT · Other · 2026-11-06
incransomhttps://www.sleep-clinic.ca/CA · Healthcare · 2026-11-06
akiraBoyle, Pecharich, Cline, Whittington andStallings— · Professional Services · 2026-11-06
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-70111HIGH

Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.67%
CVE-2026-70110HIGH

Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.43%
CVE-2026-70109HIGH

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.43%
CVE-2026-70108HIGH

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.38%
CVE-2026-70106HIGH

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.38%
CVE-2026-70104HIGH

Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.38%
CVE-2026-70103HIGH

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.36%
CVE-2026-70102HIGH

Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.34%
CVE-2026-70097MEDIUM

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.

AFFECTED SURFACEProduct not specified
CVSS 5.6EPSS 0.20%
CVE-2026-70096CRITICAL

Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.96%
CVE-2026-70095HIGH

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.57%
CVE-2026-70093HIGH

Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.34%
CVE-2026-70092HIGH

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.43%
CVE-2026-70090MEDIUM

Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.41%
CVE-2026-70089HIGH

Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.84%
CVE-2026-70087MEDIUM

Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows server 2012microsoft windows server 2016microsoft windows server 2019microsoft windows server 2022
CVSS 5.5EPSS 0.28%
CVE-2026-70086HIGH

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-70085MEDIUM

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

AFFECTED SURFACEmicrosoft windows server 2012microsoft windows server 2016microsoft windows server 2019microsoft windows server 2022microsoft windows server 2025
CVSS 5.5EPSS 0.28%
CVE-2026-70084MEDIUM

Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.45%
CVE-2026-70083MEDIUM

Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows server 2012microsoft windows server 2016microsoft windows server 2019microsoft windows server 2022
CVSS 5.5EPSS 0.28%
CVE-2026-70082HIGH

Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.

AFFECTED SURFACEmicrosoft windows server 2012microsoft windows server 2016microsoft windows server 2019microsoft windows server 2022microsoft windows server 2025
CVSS 7.5EPSS 1.17%
CVE-2026-70079HIGH

Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows server 2012microsoft windows server 2016microsoft windows server 2019microsoft windows server 2022
CVSS 7.5EPSS 1.12%
CVE-2026-70077MEDIUM

Use after free in Windows Kernel allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 4.7EPSS 0.32%
CVE-2026-70076HIGH

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.30%