L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
medusalocker16 menções
N0n15 menções
BrainCipher12 menções
SilentRansomGroup8 menções
safepay8 menções
akira7 menções
play5 menções
Dark Project4 menções
qilin4 menções
Whitearmor2 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
WhitearmormaerskDK · Transportation · 2026-11-07
anubisKahler AutomationDE · Manufacturing · 2026-11-07
SilentRansomGroupBenesch LawUS · Professional Services · 2026-11-07
incransom1da9100e55aqf21eb651eNeaAL · Not Found · 2026-11-07
BrainCipherMutares.comDE · Manufacturing · 2026-11-06
SilentRansomGroupTucker EllisUS · Professional Services · 2026-11-06
SilentRansomGroupWachtell, Lipton, Rosen & KatzUS · Professional Services · 2026-11-06
SilentRansomGroupB... law— · Professional Services · 2026-11-06
direwolfAlgonomyUS · Technology · 2026-11-06
akiraHudson & Hudson SignProductsUS · Manufacturing · 2026-11-06
ShibaIstituto BorgoIT · Other · 2026-11-06
incransomhttps://www.sleep-clinic.ca/CA · Healthcare · 2026-11-06
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-106625HIGH

Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.21%
CVE-2026-105733HIGH

Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.33%
CVE-2026-105732HIGH

Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.3EPSS 0.41%
CVE-2026-105731MEDIUM

Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.38%
CVE-2026-105729HIGH

Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.32%
CVE-2026-105728HIGH

Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.88%
CVE-2026-105727HIGH

Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.92%
CVE-2026-105726MEDIUM

Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.38%
CVE-2026-105725HIGH

Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-105723HIGH

Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 1.15%
CVE-2026-105722HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-105720MEDIUM

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

AFFECTED SURFACEmicrosoft sharepoint server
CVSS 4.3EPSS 0.43%
CVE-2026-105719MEDIUM

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft sharepoint server
CVSS 6.5EPSS 0.96%
CVE-2026-105718HIGH

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024microsoft office online server
CVSS 8.8EPSS 0.82%
CVE-2026-105717HIGH

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.76%
CVE-2026-105716HIGH

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.72%
CVE-2026-105715HIGH

Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 7.5EPSS 0.54%
CVE-2026-105714HIGH

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 7.5EPSS 0.54%
CVE-2026-105713MEDIUM

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.

AFFECTED SURFACEmicrosoft sharepoint server
CVSS 5.7EPSS 0.37%
CVE-2026-105599HIGH

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2021microsoft office 2024
CVSS 7.5EPSS 0.54%
CVE-2026-105598HIGH

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.72%
CVE-2026-105597HIGH

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.72%
CVE-2026-105596HIGH

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.72%
CVE-2026-105595HIGH

Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.72%