L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE
CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS
qilin12 menções
SilentRansomGroup11 menções
genesis9 menções
safepay9 menções
thegentlemen9 menções
Booba Project6 menções
everstake5 menções
rhysida5 menções
Shiba4 menções
N0n3 menções
INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE
safepayquevedo-ponce.comEC · Other · 2026-10-31
safepaymars-semi.com.twTW · Manufacturing · 2026-10-31
safepayRood TruckingUS · Transportation · 2026-10-31
safepaygrifosespinoza.comPE · Other · 2026-10-31
safepayjumonji-u.ac.jpJP · Education · 2026-10-31
safepayeveron.com.arAR · Other · 2026-10-31
safepaygoldencrops.com.twTW · Agriculture and Food Production · 2026-10-31
safepaylayam.comIL · Not Found · 2026-10-31
safepayuaa.mxMX · Education · 2026-10-31
N0nDigital TriumphMY · Technology · 2026-10-31
thegentlemenBi LinkSG · Not Found · 2026-10-31
everstakesp*****g.com— · Not Found · 2026-10-30
MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR
Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

27753 REGISTROS ENCONTRADOSFEED 2026-10-27
CVE-2026-106258MEDIUM

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

AFFECTED SURFACEgoogle chromemicrosoft windows
CVSS 4.7EPSS 0.22%
CVE-2026-106257HIGH

Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

AFFECTED SURFACEgoogle chrome
CVSS 8.8EPSS 0.30%
CVE-2026-106256HIGH

Information leak in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)

AFFECTED SURFACEgoogle chromegoogle android
CVSS 8.8EPSS 0.25%
CVE-2026-106255HIGH

Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

AFFECTED SURFACEgoogle chrome
CVSS 8.8EPSS 0.24%
CVE-2026-106254MEDIUM

Information leak in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via a co-installed app. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chromegoogle android
CVSS 5.1EPSS 0.09%
CVE-2026-106253MEDIUM

Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 4.3EPSS 0.18%
CVE-2026-106252HIGH

Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

AFFECTED SURFACEgoogle chrome
CVSS 8.8EPSS 0.30%
CVE-2026-106251MEDIUM

UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity: Low)

AFFECTED SURFACEgoogle chromeapple macos
CVSS 5.4EPSS 0.18%
CVE-2026-106250MEDIUM

Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

AFFECTED SURFACEgoogle chrome
CVSS 5.4EPSS 0.17%
CVE-2026-106249HIGH

Incorrect authorization in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)

AFFECTED SURFACEgoogle chromegoogle android
CVSS 8.8EPSS 0.24%
CVE-2026-106248HIGH

Use after free in Bindings in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

AFFECTED SURFACEgoogle chrome
CVSS 8.8EPSS 0.30%
CVE-2026-106247HIGH

Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

AFFECTED SURFACEgoogle chrome
CVSS 8.3EPSS 0.33%
CVE-2026-106246MEDIUM

Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 5.4EPSS 0.20%
CVE-2026-106245MEDIUM

Uninitialized resource in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

AFFECTED SURFACEgoogle chrome
CVSS 4.3EPSS 0.22%
CVE-2026-106244MEDIUM

Incorrect authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 6.5EPSS 0.18%
CVE-2026-106243MEDIUM

Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: High)

AFFECTED SURFACEgoogle chrome
CVSS 5.3EPSS 0.11%
CVE-2026-106242MEDIUM

Information leak in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via crafted network traffic. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chromegoogle android
CVSS 6.5EPSS 0.23%
CVE-2026-106241CRITICAL

Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chromegoogle android
CVSS 9.6EPSS 0.33%
CVE-2026-106240HIGH

Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

AFFECTED SURFACEgoogle chrome
CVSS 8.8EPSS 0.44%
CVE-2026-106239CRITICAL

Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

AFFECTED SURFACEgoogle chromegoogle android
CVSS 9.6EPSS 0.42%
CVE-2026-106238HIGH

Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

AFFECTED SURFACEgoogle chrome
CVSS 8.3EPSS 0.30%
CVE-2026-106237CRITICAL

Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)

AFFECTED SURFACEgoogle chrome
CVSS 9.6EPSS 0.25%
CVE-2026-106236MEDIUM

UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity: Low)

AFFECTED SURFACEgoogle chromemicrosoft windows
CVSS 5.4EPSS 0.22%
CVE-2026-106235HIGH

Use after free in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

AFFECTED SURFACEgoogle chrome
CVSS 8.8EPSS 0.38%