L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n69 menções
Deadlock6 menções
krybit5 menções
lockbit54 menções
incransom3 menções
metaencryptor2 menções
Aoqin1 menções
BYOD1 menções
Barracuda1 menções
Eclipse1 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
N0nCompany #211US · Not Found · 2026-11-09
N0nCompany #210US · Not Found · 2026-11-09
N0nCompany #209US · Not Found · 2026-11-09
N0nCompany #208— · Not Found · 2026-11-09
N0nCompany #207NL · Not Found · 2026-11-09
N0nCompany #206— · Not Found · 2026-11-09
N0nCompany #205US · Not Found · 2026-11-09
N0nCompany #204US · Not Found · 2026-11-09
N0nCompany #203US · Not Found · 2026-11-09
N0nCompany #202US · Not Found · 2026-11-09
N0nCompany #201IT · Not Found · 2026-11-09
N0nCompany #200US · Not Found · 2026-11-09
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-83972HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.8EPSS 0.31%
CVE-2026-83971HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.8EPSS 0.31%
CVE-2026-83970HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.8EPSS 0.31%
CVE-2026-83969HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.8EPSS 0.24%
CVE-2026-83968HIGH

Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.8EPSS 0.31%
CVE-2026-83967HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.8EPSS 0.31%
CVE-2026-83955HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.8EPSS 0.24%
CVE-2026-83954HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.8EPSS 0.31%
CVE-2026-83952HIGH

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1microsoft windows server 2025
CVSS 7.8EPSS 0.24%
CVE-2026-83951MEDIUM

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2019microsoft office 2021microsoft office 2024microsoft word
CVSS 5.5EPSS 0.40%
CVE-2026-83949MEDIUM

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2019microsoft office 2021microsoft office 2024microsoft word
CVSS 5.5EPSS 0.40%
CVE-2026-83948HIGH

Improper neutralization of special elements used in a command ('command injection') in Microsoft Azure CLI allows an authorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft vm repair
CVSS 8.0EPSS 0.41%
CVE-2026-83942HIGH

Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2
CVSS 7.8EPSS 0.21%
CVE-2026-83941CRITICAL

Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.

AFFECTED SURFACEProduct not specified
CVSS 9.9EPSS 0.73%
CVE-2026-83940HIGH

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 7.0EPSS 0.25%
CVE-2026-83939HIGH

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 11 26h1
CVSS 8.2EPSS 0.30%
CVE-2026-83501MEDIUM

Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.

AFFECTED SURFACEmicrosoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1microsoft windows server 2025
CVSS 5.5EPSS 0.30%
CVE-2026-83498HIGH

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1microsoft windows server 2025
CVSS 7.8EPSS 0.30%
CVE-2026-81963HIGH

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1microsoft windows server 2025
CVSS 7.8EPSS 0.63%
CVE-2026-81960HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft excelmicrosoft microsoft 365microsoft office 2016microsoft office 2019microsoft office 2021
CVSS 7.8EPSS 0.42%
CVE-2026-81959HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft excelmicrosoft microsoft 365microsoft office 2016microsoft office 2019microsoft office 2021
CVSS 7.8EPSS 0.43%
CVE-2026-81958MEDIUM

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft excelmicrosoft microsoft 365microsoft office 2016microsoft office 2019microsoft office 2021
CVSS 5.5EPSS 0.38%
CVE-2026-81957HIGH

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft excelmicrosoft microsoft 365microsoft office 2016microsoft office 2019microsoft office 2021
CVSS 7.8EPSS 0.42%
CVE-2026-81956HIGH

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft excelmicrosoft microsoft 365microsoft office 2016microsoft office 2019microsoft office 2021
CVSS 7.8EPSS 0.42%