L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
medusalocker16 menções
N0n15 menções
BrainCipher12 menções
SilentRansomGroup8 menções
safepay8 menções
akira7 menções
play5 menções
Dark Project4 menções
qilin4 menções
Whitearmor2 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
WhitearmormaerskDK · Transportation · 2026-11-07
anubisKahler AutomationDE · Manufacturing · 2026-11-07
SilentRansomGroupBenesch LawUS · Professional Services · 2026-11-07
incransom1da9100e55aqf21eb651eNeaAL · Not Found · 2026-11-07
BrainCipherMutares.comDE · Manufacturing · 2026-11-06
SilentRansomGroupTucker EllisUS · Professional Services · 2026-11-06
SilentRansomGroupWachtell, Lipton, Rosen & KatzUS · Professional Services · 2026-11-06
SilentRansomGroupB... law— · Professional Services · 2026-11-06
direwolfAlgonomyUS · Technology · 2026-11-06
akiraHudson & Hudson SignProductsUS · Manufacturing · 2026-11-06
ShibaIstituto BorgoIT · Other · 2026-11-06
incransomhttps://www.sleep-clinic.ca/CA · Healthcare · 2026-11-06
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-69998HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.5EPSS 0.56%
CVE-2026-69997HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.5EPSS 0.56%
CVE-2026-69996HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.5EPSS 0.56%
CVE-2026-69995HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.5EPSS 0.56%
CVE-2026-69994HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.5EPSS 0.56%
CVE-2026-69992HIGH

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.5EPSS 0.56%
CVE-2026-69991HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.5EPSS 0.56%
CVE-2026-69988HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.57%
CVE-2026-69987HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.57%
CVE-2026-69986HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.57%
CVE-2026-69985HIGH

Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.66%
CVE-2026-69984HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.57%
CVE-2026-69982MEDIUM

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.

AFFECTED SURFACEProduct not specified
CVSS 5.9EPSS 0.57%
CVE-2026-69979MEDIUM

Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.35%
CVE-2026-69978MEDIUM

Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.

AFFECTED SURFACEProduct not specified
CVSS 5.6EPSS 0.32%
CVE-2026-69977HIGH

Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.27%
CVE-2026-69976HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.57%
CVE-2026-69974MEDIUM

Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 4.7EPSS 0.29%
CVE-2026-69973MEDIUM

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.71%
CVE-2026-69971MEDIUM

Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.36%
CVE-2026-69970HIGH

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.24%
CVE-2026-69969MEDIUM

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 4.7EPSS 0.33%
CVE-2026-69968MEDIUM

Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.77%
CVE-2026-69967MEDIUM

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.41%