L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n44 menções
interlock9 menções
Booba Project6 menções
SilentRansomGroup4 menções
Aoqin3 menções
BYOD3 menções
Climax Inc3 menções
Vortex3 menções
play3 menções
Black X2 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
AoqinTyfoneUS · Technology · 2026-11-11
interlockGarden Valley School DivisionCA · Education · 2026-11-11
qilinOral Roberts UniversityUS · Education · 2026-11-11
osirisThe Queenan Law FirmUS · Professional Services · 2026-11-11
PanzerSUNNIER HOMESES · Retail & E-Commerce · 2026-11-11
medusalockerCapetown— · Not Found · 2026-11-10
bravoxAWO BundesverbandDE · Other · 2026-11-10
playNY SnacksUS · Retail & E-Commerce · 2026-11-10
playBROTHERS EXPRESS LLCUS · Transportation · 2026-11-10
playSignworxGB · Other · 2026-11-10
Dark ProjectBear Valley Community HospitalUS · Healthcare · 2026-11-10
SilentRansomGroupA&O ShearmanGB · Professional Services · 2026-11-10
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

34743 REGISTROS ENCONTRADOSFEED 2026-11-10
CVE-2026-87568MEDIUM

Improper input validation in Chromium in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via crafted network traffic. (Chromium security severity: Low)

AFFECTED SURFACEgoogle chrome
CVSS 4.3EPSS 0.16%
CVE-2026-87567MEDIUM

UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted domain name. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 4.3EPSS 0.16%
CVE-2026-87566MEDIUM

Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 5.3EPSS 0.22%
CVE-2026-87565MEDIUM

Information leak in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)

AFFECTED SURFACEgoogle chromegoogle android
CVSS 6.5EPSS 0.30%
CVE-2026-87564MEDIUM

Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)

AFFECTED SURFACEgoogle chrome
CVSS 4.3EPSS 0.27%
CVE-2026-87563MEDIUM

Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 4.3EPSS 0.16%
CVE-2026-87562MEDIUM

Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chromeapple macos
CVSS 4.3EPSS 0.18%
CVE-2026-87561MEDIUM

Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Low)

AFFECTED SURFACEgoogle chrome
CVSS 4.3EPSS 0.21%
CVE-2026-87560MEDIUM

Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 4.3EPSS 0.20%
CVE-2026-87559MEDIUM

UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 4.2EPSS 0.20%
CVE-2026-87558CRITICAL

Use after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

AFFECTED SURFACEgoogle chromeapple macos
CVSS 9.6EPSS 0.40%
CVE-2026-87557MEDIUM

Missing authorization in LocalNetworkAccess in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 4.3EPSS 0.22%
CVE-2026-87556MEDIUM

Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 4.3EPSS 0.28%
CVE-2026-87555MEDIUM

Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chromegoogle android
CVSS 4.7EPSS 0.31%
CVE-2026-87554HIGH

Race condition in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)

AFFECTED SURFACEgoogle chromemicrosoft windows
CVSS 8.1EPSS 0.09%
CVE-2026-87553HIGH

Improper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 8.3EPSS 0.37%
CVE-2026-87552MEDIUM

Missing authorization in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to obtain sensitive information via a co-installed app. (Chromium security severity: High)

AFFECTED SURFACEgoogle chromegoogle android
CVSS 5.5EPSS 0.11%
CVE-2026-87551MEDIUM

Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)

AFFECTED SURFACEgoogle chrome
CVSS 4.3EPSS 0.14%
CVE-2026-87550MEDIUM

Improper encoding or escaping of output in CSS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 4.3EPSS 0.24%
CVE-2026-87549MEDIUM

Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 6.5EPSS 0.32%
CVE-2026-87548MEDIUM

Improper state validation in Installer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 4.3EPSS 0.28%
CVE-2026-87547CRITICAL

Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 9.6EPSS 0.43%
CVE-2026-87546MEDIUM

Incorrect type conversion or cast in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted file. (Chromium security severity: Low)

AFFECTED SURFACEgoogle chromeapple macos
CVSS 4.3EPSS 0.20%
CVE-2026-87545MEDIUM

Information leak in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)

AFFECTED SURFACEgoogle chromeapple iphone os
CVSS 6.5EPSS 0.25%