L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
medusalocker16 menções
N0n15 menções
BrainCipher12 menções
SilentRansomGroup8 menções
safepay8 menções
akira7 menções
play5 menções
Dark Project4 menções
qilin4 menções
Whitearmor2 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
WhitearmormaerskDK · Transportation · 2026-11-07
anubisKahler AutomationDE · Manufacturing · 2026-11-07
SilentRansomGroupBenesch LawUS · Professional Services · 2026-11-07
incransom1da9100e55aqf21eb651eNeaAL · Not Found · 2026-11-07
BrainCipherMutares.comDE · Manufacturing · 2026-11-06
SilentRansomGroupTucker EllisUS · Professional Services · 2026-11-06
SilentRansomGroupWachtell, Lipton, Rosen & KatzUS · Professional Services · 2026-11-06
SilentRansomGroupB... law— · Professional Services · 2026-11-06
direwolfAlgonomyUS · Technology · 2026-11-06
akiraHudson & Hudson SignProductsUS · Manufacturing · 2026-11-06
ShibaIstituto BorgoIT · Other · 2026-11-06
incransomhttps://www.sleep-clinic.ca/CA · Healthcare · 2026-11-06
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-102216HIGH

Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-102215HIGH

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-102214HIGH

Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.33%
CVE-2026-102211HIGH

Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.20%
CVE-2026-102210CRITICAL

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.89%
CVE-2026-102209HIGH

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.24%
CVE-2026-102208HIGH

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-102207HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.19%
CVE-2026-102206MEDIUM

Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack.

AFFECTED SURFACEProduct not specified
CVSS 6.8EPSS 0.42%
CVE-2026-102205HIGH

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-102204HIGH

Improper link resolution before file access ('link following') in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.34%
CVE-2026-102203HIGH

Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.77%
CVE-2026-102202HIGH

Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.35%
CVE-2026-102201HIGH

Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-102199MEDIUM

Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.85%
CVE-2026-102198MEDIUM

Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.

AFFECTED SURFACEProduct not specified
CVSS 5.3EPSS 0.69%
CVE-2026-102197HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-102196HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-102195HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-102194HIGH

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-102193HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-102192HIGH

Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 1.15%
CVE-2026-102191HIGH

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-102189HIGH

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%