L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
N0n29 menções
Curious Worm9 menções
interlock9 menções
Booba Project6 menções
SilentRansomGroup4 menções
play4 menções
Aoqin3 menções
BYOD3 menções
Climax Inc3 menções
Vortex3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
playMinor League BaseballUS · Hospitality · 2026-11-11
N0nCompany #213QA · Not Found · 2026-11-11
N0nCompany #212ET · Not Found · 2026-11-11
DoommageddonK**** T**** H**** B****— · Not Found · 2026-11-11
Curious Wormsacheminc.comCA · Manufacturing · 2026-11-11
Curious Wormsbhny.orgUS · Not Found · 2026-11-11
Curious Wormshannonhealth.comIE · Healthcare · 2026-11-11
Curious Wormbaronandbudd.comGB · Professional Services · 2026-11-11
Curious Wormraleighortho.comUS · Healthcare · 2026-11-11
everstakeki*****o.com— · Not Found · 2026-11-11
Curious Wormlifelinescreening.comUS · Healthcare · 2026-11-11
Curious Wormsafcodental.comSA · Healthcare · 2026-11-11
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

34743 REGISTROS ENCONTRADOSFEED 2026-11-10
CVE-2026-69393MEDIUM

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network.

AFFECTED SURFACEProduct not specified
CVSS 5.7EPSS 0.84%
CVE-2026-69392HIGH

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.25%
CVE-2026-69391HIGH

Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-69390MEDIUM

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.40%
CVE-2026-69389HIGH

Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.32%
CVE-2026-69388HIGH

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-69386HIGH

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.8EPSS 0.77%
CVE-2026-69385HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.21%
CVE-2026-69384HIGH

Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally.

AFFECTED SURFACEProduct not specified
CVSS 7.1EPSS 0.41%
CVE-2026-69383HIGH

External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.0EPSS 0.25%
CVE-2026-69382MEDIUM

Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network.

AFFECTED SURFACEProduct not specified
CVSS 5.9EPSS 0.44%
CVE-2026-69381MEDIUM

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.

AFFECTED SURFACEProduct not specified
CVSS 4.6EPSS 0.43%
CVE-2026-69380HIGH

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.1EPSS 0.71%
CVE-2026-69379HIGH

Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEmicrosoft windows 11 23h2microsoft windows 11 24h2microsoft windows 11 25h2microsoft windows 11 26h1microsoft windows server 2025
CVSS 7.0EPSS 0.27%
CVE-2026-69378HIGH

Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.

AFFECTED SURFACEProduct not specified
CVSS 7.5EPSS 1.11%
CVE-2026-69377HIGH

Missing authorization in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.28%
CVE-2026-69376MEDIUM

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.40%
CVE-2026-69375MEDIUM

Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 0.59%
CVE-2026-69374MEDIUM

Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network.

AFFECTED SURFACEProduct not specified
CVSS 6.5EPSS 1.09%
CVE-2026-69373MEDIUM

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 6.7EPSS 0.33%
CVE-2026-69372MEDIUM

Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network.

AFFECTED SURFACEProduct not specified
CVSS 5.7EPSS 0.81%
CVE-2026-69371HIGH

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network.

AFFECTED SURFACEProduct not specified
CVSS 8.0EPSS 0.70%
CVE-2026-69369MEDIUM

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.

AFFECTED SURFACEProduct not specified
CVSS 5.5EPSS 0.31%
CVE-2026-69368HIGH

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

AFFECTED SURFACEProduct not specified
CVSS 7.8EPSS 0.24%