L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE

CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS

N0n44 menções

interlock9 menções

Booba Project6 menções

SilentRansomGroup4 menções

Aoqin3 menções

BYOD3 menções

Climax Inc3 menções

Vortex3 menções

play3 menções

Black X2 menções

INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE

AoqinTyfoneUS · Technology · 2026-11-11

interlockGarden Valley School DivisionCA · Education · 2026-11-11

qilinOral Roberts UniversityUS · Education · 2026-11-11

osirisThe Queenan Law FirmUS · Professional Services · 2026-11-11

PanzerSUNNIER HOMESES · Retail & E-Commerce · 2026-11-11

medusalockerCapetown— · Not Found · 2026-11-10

bravoxAWO BundesverbandDE · Other · 2026-11-10

playNY SnacksUS · Retail & E-Commerce · 2026-11-10

playBROTHERS EXPRESS LLCUS · Transportation · 2026-11-10

playSignworxGB · Other · 2026-11-10

Dark ProjectBear Valley Community HospitalUS · Healthcare · 2026-11-10

SilentRansomGroupA&O ShearmanGB · Professional Services · 2026-11-10

MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR

Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

34743 REGISTROS ENCONTRADOSFEED 2026-11-10

CVE-2026-109833MEDIUM

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS read path, partial consumption of the internal peek buffer incorrectly moves remaining peeked bytes into the caller-supplied buffer instead of compacting the peek buffer. A remote attacker who can reach an enabled VNC TLS listener and trigger a peek/read size mismatch can cause an out-of-bounds write, leading to denial of service.

AFFECTED SURFACEProduct not specified

CVE-2026-109783ANALYSIS

Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5.

AFFECTED SURFACEProduct not specified

CVE-2026-109782ANALYSIS

Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5.

AFFECTED SURFACEProduct not specified

CVE-2026-109781MEDIUM

Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.

AFFECTED SURFACEProduct not specified

CVE-2026-109780ANALYSIS

Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158.

AFFECTED SURFACEProduct not specified

CVE-2026-109779MEDIUM

Race condition in the Networking: DNS component. This vulnerability was fixed in Firefox 158.

AFFECTED SURFACEProduct not specified

CVE-2026-109778HIGH

Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.

AFFECTED SURFACEProduct not specified

CVE-2026-109777MEDIUM

Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.

AFFECTED SURFACEProduct not specified

CVE-2026-109776ANALYSIS

Race condition in the XPCOM component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.

AFFECTED SURFACEProduct not specified

CVE-2026-109775MEDIUM

Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.

AFFECTED SURFACEProduct not specified

CVE-2026-109774ANALYSIS

Invalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixed in Firefox 158.

AFFECTED SURFACEProduct not specified

CVE-2026-109773MEDIUM

Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158.

AFFECTED SURFACEProduct not specified

CVE-2026-109772ANALYSIS

Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox 158.

AFFECTED SURFACEProduct not specified

CVE-2026-109771MEDIUM

Information disclosure in the WebRTC: Networking component. This vulnerability was fixed in Firefox 158.

AFFECTED SURFACEProduct not specified

CVE-2026-109770ANALYSIS

Spoofing issue in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.

AFFECTED SURFACEProduct not specified

CVE-2026-109769MEDIUM

Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 158.

AFFECTED SURFACEProduct not specified

CVE-2026-109768MEDIUM

Denial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158.

AFFECTED SURFACEProduct not specified

CVE-2026-109767MEDIUM

Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.

AFFECTED SURFACEProduct not specified

CVE-2026-109766ANALYSIS

Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.

AFFECTED SURFACEProduct not specified

CVE-2026-109765MEDIUM

Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.

AFFECTED SURFACEProduct not specified

CVE-2026-109764ANALYSIS

Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.

AFFECTED SURFACEProduct not specified

CVE-2026-109763ANALYSIS

Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.

AFFECTED SURFACEProduct not specified

CVE-2026-109762ANALYSIS

Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.

AFFECTED SURFACEProduct not specified

CVE-2026-109761MEDIUM

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158.

AFFECTED SURFACEProduct not specified