Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada ahora mismo

13,509

Total alertas

3066

Críticas

10171

Altas

8

Ransomware

1815

Esta semana

RSS

Vulnerabilidades × Alta × exchange server × Limpiar todo ×

M Alto vulnerabilidad

[CVE-2026-55005] Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute cod…

Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-55006] Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacke…

Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

M Alto vulnerabilidad

[CVE-2026-55009] Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elev…

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

M Alto vulnerabilidad

[CVE-2026-47631] Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ex…

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

M Alto vulnerabilidad

[CVE-2026-45503] Improper authorization in Microsoft Exchange Server allows an authorized attacker to disclose inform…

Improper authorization in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.

M Alto vulnerabilidad

[CVE-2026-45504] Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to ele…

Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

M Alto vulnerabilidad

[CVE-2026-45583] Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an una…

Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.