L/BLAB BOTSPUBLIC THREAT INTELLIGENCE NODE

CVE KNOWLEDGE BASE

Intelligence
Explorer.

Investigue vulnerabilidades por identificador, produto afetado ou descrição. Use severidade, CVSS e EPSS juntos para orientar a prioridade.

// THREAT ACTIVITY

Grupos & malware emergente

Atividade pública observada em leak sites e repositórios comunitários. Alegações de vítimas não representam confirmação independente de incidente.

RANSOMWARE GROUPSRECENT CLAIMS

N0n16 menções

qilin13 menções

safepay10 menções

akira6 menções

incransom6 menções

Aoqin4 menções

Booba Project4 menções

Orova4 menções

payload4 menções

Whitearmor3 menções

INFOSTEALERSOBSERVED

Sem famílias correlacionadas no recorte recente.

RECENT RANSOMWARE CLAIMSRANSOMWARE.LIVE

AoqinSILIKO d.o.o.SI · Manufacturing · 2026-11-04

AoqinPetroshahd(Enap Sipetrol International - Egypt Branch)CL · Energy & Utilities · 2026-11-04

AoqinNextron TechnologyCN · Technology · 2026-11-04

AoqinGoldsmith & HullUS · Professional Services · 2026-11-04

incransombliss1041.comUS · Not Found · 2026-11-03

incransominnovativedriven.comUS · Technology · 2026-11-03

incransombutler.legalUS · Professional Services · 2026-11-03

incransomroundglass.comUS · Healthcare · 2026-11-03

incransomfidepartners.comES · Financial Services · 2026-11-03

chaosdarrequipment.comUS · Manufacturing · 2026-11-03

FalconBuchanan Ingersoll & Rooney PCUS · Professional Services · 2026-11-03

WhitearmorProject Trojan Horse— · Other · 2026-11-03

MALWARE FAMILIES / 7 DAYSMALWAREBAZAAR

Configure a Auth-Key gratuita do abuse.ch para habilitar detecções recentes do MalwareBazaar.

FONTES: RANSOMWARE.LIVE + MALWAREBAZAAR / ABUSE.CH · CACHE 1H

30947 REGISTROS ENCONTRADOSFEED 2026-11-03

CVE-2026-100819ANALYSIS

Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

AFFECTED SURFACEProduct not specified

CVE-2026-100818CRITICAL

Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.

AFFECTED SURFACEProduct not specified

CVE-2026-100817ANALYSIS

Other issue in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 157.

AFFECTED SURFACEProduct not specified

CVE-2026-100816ANALYSIS

Site isolation issue in the DOM: Networking component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.

AFFECTED SURFACEProduct not specified

CVE-2026-100815ANALYSIS

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.

AFFECTED SURFACEProduct not specified

CVE-2026-100814ANALYSIS

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.

AFFECTED SURFACEProduct not specified

CVE-2026-100813ANALYSIS

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 157.

AFFECTED SURFACEProduct not specified

CVE-2026-100812ANALYSIS

Denial-of-service in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.

AFFECTED SURFACEProduct not specified

CVE-2026-100811ANALYSIS

Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.

AFFECTED SURFACEProduct not specified

CVE-2026-100810ANALYSIS

Other issue in the DevTools component. This vulnerability was fixed in Firefox 157.

AFFECTED SURFACEProduct not specified

CVE-2026-100809ANALYSIS

Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.

AFFECTED SURFACEProduct not specified

CVE-2026-100808ANALYSIS

Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.

AFFECTED SURFACEProduct not specified

CVE-2026-100807HIGH

Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.

AFFECTED SURFACEProduct not specified

CVE-2026-100806ANALYSIS

Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.

AFFECTED SURFACEProduct not specified

CVE-2026-100805ANALYSIS

Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 157.

AFFECTED SURFACEProduct not specified

CVE-2026-100804ANALYSIS

Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Firefox 157.

AFFECTED SURFACEProduct not specified

CVE-2026-100803ANALYSIS

Same-origin policy bypass in the WebExtensions component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

AFFECTED SURFACEProduct not specified

CVE-2026-100802ANALYSIS

Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 157.

AFFECTED SURFACEProduct not specified

CVE-2026-100801HIGH

Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.

AFFECTED SURFACEProduct not specified

CVE-2026-100800ANALYSIS

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.

AFFECTED SURFACEProduct not specified

CVE-2026-100799ANALYSIS

Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 157.

AFFECTED SURFACEProduct not specified

CVE-2026-100798ANALYSIS

Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.

AFFECTED SURFACEProduct not specified

CVE-2026-100797HIGH

Privilege escalation due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

AFFECTED SURFACEProduct not specified

CVE-2026-100796ANALYSIS

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 157.

AFFECTED SURFACEProduct not specified