L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n69 menções
Deadlock6 menções
krybit5 menções
lockbit54 menções
incransom3 menções
metaencryptor2 menções
Aoqin1 menções
BYOD1 menções
Barracuda1 menções
Eclipse1 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
N0nCompany #211US · Not Found · 2026-11-09
N0nCompany #210US · Not Found · 2026-11-09
N0nCompany #209US · Not Found · 2026-11-09
N0nCompany #208— · Not Found · 2026-11-09
N0nCompany #207NL · Not Found · 2026-11-09
N0nCompany #206— · Not Found · 2026-11-09
N0nCompany #205US · Not Found · 2026-11-09
N0nCompany #204US · Not Found · 2026-11-09
N0nCompany #203US · Not Found · 2026-11-09
N0nCompany #202US · Not Found · 2026-11-09
N0nCompany #201IT · Not Found · 2026-11-09
N0nCompany #200US · Not Found · 2026-11-09
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03
CVE-2026-78521HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2019microsoft office 2021microsoft office 2024microsoft word
CVSS 8.8EPSS 0.59%
CVE-2026-78520MEDIUM

Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2019microsoft office 2021microsoft office 2024microsoft word
CVSS 6.5EPSS 0.70%
CVE-2026-78519HIGH

Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2019microsoft office 2021microsoft office 2024microsoft outlook
CVSS 8.8EPSS 0.60%
CVE-2026-78518HIGH

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft excelmicrosoft microsoft 365microsoft office 2016microsoft office 2019microsoft office 2021
CVSS 8.8EPSS 0.86%
CVE-2026-78517HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2019microsoft office 2021microsoft office 2024microsoft word
CVSS 8.8EPSS 0.59%
CVE-2026-78516MEDIUM

Buffer over-read in Windows Storage allows an unauthorized attacker to disclose information with a physical attack.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 4.3EPSS 0.50%
CVE-2026-78515MEDIUM

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2016microsoft office 2019microsoft office 2021microsoft office 2024
CVSS 6.5EPSS 0.92%
CVE-2026-78514HIGH

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2019microsoft office 2021microsoft office 2024microsoft word
CVSS 8.8EPSS 0.59%
CVE-2026-78513MEDIUM

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2019microsoft office 2021microsoft office 2024microsoft powerpoint
CVSS 5.5EPSS 0.54%
CVE-2026-78512HIGH

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2016microsoft office 2019microsoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.82%
CVE-2026-78511HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2019microsoft office 2021microsoft office 2024microsoft word
CVSS 8.8EPSS 0.82%
CVE-2026-78510CRITICAL

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2016microsoft office 2019microsoft office 2021microsoft office 2024
CVSS 9.8EPSS 0.95%
CVE-2026-78509CRITICAL

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2019microsoft office 2021microsoft office 2024microsoft word
CVSS 9.8EPSS 0.95%
CVE-2026-78508MEDIUM

Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack.

AFFECTED SURFACEmicrosoft windows 10 1607microsoft windows 10 1809microsoft windows 10 21h2microsoft windows 10 22h2microsoft windows 11 23h2microsoft windows 11 24h2
CVSS 4.6EPSS 0.45%
CVE-2026-78507HIGH

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2019microsoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.59%
CVE-2026-78506MEDIUM

Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2019microsoft office 2021microsoft office 2024microsoft word
CVSS 5.5EPSS 0.54%
CVE-2026-78505HIGH

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2016microsoft office 2019microsoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.80%
CVE-2026-78504HIGH

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2019microsoft office 2021microsoft office 2024microsoft word
CVSS 8.8EPSS 0.59%
CVE-2026-78503MEDIUM

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2019microsoft office 2021microsoft office 2024microsoft word
CVSS 6.5EPSS 0.92%
CVE-2026-78502MEDIUM

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft microsoft 365microsoft office 2019microsoft office 2021microsoft office 2024microsoft word
CVSS 6.5EPSS 0.69%
CVE-2026-78464HIGH

Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1
CVSS 7.0EPSS 0.19%
CVE-2026-78463HIGH

Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.88%
CVE-2026-78462HIGH

Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

AFFECTED SURFACEmicrosoft visual studio code
CVSS 8.8EPSS 0.50%
CVE-2026-78461HIGH

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

AFFECTED SURFACEmicrosoft visual studio code
CVSS 7.4EPSS 1.04%