L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n29 menções
Curious Worm9 menções
interlock9 menções
Booba Project6 menções
SilentRansomGroup4 menções
play4 menções
Aoqin3 menções
BYOD3 menções
Climax Inc3 menções
Vortex3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
playMinor League BaseballUS · Hospitality · 2026-11-11
N0nCompany #213QA · Not Found · 2026-11-11
N0nCompany #212ET · Not Found · 2026-11-11
DoommageddonK**** T**** H**** B****— · Not Found · 2026-11-11
Curious Wormsacheminc.comCA · Manufacturing · 2026-11-11
Curious Wormsbhny.orgUS · Not Found · 2026-11-11
Curious Wormshannonhealth.comIE · Healthcare · 2026-11-11
Curious Wormbaronandbudd.comGB · Professional Services · 2026-11-11
Curious Wormraleighortho.comUS · Healthcare · 2026-11-11
everstakeki*****o.com— · Not Found · 2026-11-11
Curious Wormlifelinescreening.comUS · Healthcare · 2026-11-11
Curious Wormsafcodental.comSA · Healthcare · 2026-11-11
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

34743 REGISTROS ENCONTRADOSFEED 2026-11-10
CVE-2026-69449MEDIUM

Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.

AFFECTED SURFACEProduct not specified
CVSS 6.7EPSS 0.38%
CVE-2026-69448HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.19%
CVE-2026-69447HIGH

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.34%
CVE-2026-69445HIGH

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed Folder allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.35%
CVE-2026-69444HIGH

Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.34%
CVE-2026-69443HIGH

Out-of-bounds read in Windows Device Health Attestation (DHA) allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 1.05%
CVE-2026-69442HIGH

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEmicrosoft 365 appsmicrosoft office 2016microsoft office 2019microsoft office 2021microsoft office 2024
CVSS 8.8EPSS 0.82%
CVE-2026-69441HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.19%
CVE-2026-69440HIGH

Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.21%
CVE-2026-69439HIGH

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.74%
CVE-2026-69438HIGH

Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.69%
CVE-2026-69436HIGH

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.35%
CVE-2026-69434HIGH

Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.77%
CVE-2026-69433HIGH

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.34%
CVE-2026-69432HIGH

Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-69431CRITICAL

Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 9.8EPSS 0.93%
CVE-2026-69430HIGH

Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-69429HIGH

Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 0.62%
CVE-2026-69428HIGH

Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 1.15%
CVE-2026-69427HIGH

Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.0EPSS 0.70%
CVE-2026-69426HIGH

Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-69425MEDIUM

Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to perform tampering locally.

AFFECTED SURFACEmicrosoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1
CVSS 4.7EPSS 0.27%
CVE-2026-69424HIGH

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-69423HIGH

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.0EPSS 0.70%