Alertas de Seguridad de la Información

G Crítico vulnerabilidad

04/06/2026

Vulnerabilidad crítica en Android OS (CVE-2026-11167) - CVSS 9.6

Google publicó un parche de seguridad para una vulnerabilidad crítica en Android OS con puntuación CVSS 9.6. La falla afecta más del 80% de dispositivos móviles en México y Latinoamérica, exponiendo sistemas corporativos y personales a explotación remota. Se recomienda actualización inmediata en todos los terminales.

google-androidseguridad-movilandroid-os CVSS 9.6 NVD

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11165] Use after free in WebMIDI in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker t…

Use after free in WebMIDI in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

nvdcriticovulnerabilidad CVSS 9.6 NVD

G Crítico vulnerabilidad

04/06/2026

Vulnerabilidad crítica Use-After-Free en Android OS (CVE-2026-11163) - CVSS 9.6

Se ha identificado una vulnerabilidad de Use-After-Free (UAF) en Android OS con puntuación CVSS 9.6, afectando más del 80% de dispositivos móviles en México y Latinoamérica. Esta falla crítica permite a atacantes ejecutar código arbitrario con privilegios elevados, comprometiendo la integridad de datos empresariales y personales. Google ha publicado parches de seguridad que deben desplegarse inmediatamente en todos los dispositivos.

google-androidseguridad-movilandroid-os CVSS 9.6 NVD

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11152] Object lifecycle issue in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to …

Object lifecycle issue in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

nvdcriticovulnerabilidad CVSS 9.6 NVD

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11153] Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote a…

Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

nvdcriticovulnerabilidad CVSS 9.1 NVD

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11146] Insufficient validation of untrusted input in Chromoting in Google Chrome prior to 149.0.7827.53 all…

Insufficient validation of untrusted input in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

nvdcriticovulnerabilidad CVSS 9.6 NVD

G Crítico vulnerabilidad

04/06/2026

Vulnerabilidad crítica Use-After-Free en Android OS (CVE-2026-11131) - CVSS 9.6

Se ha identificado una vulnerabilidad de tipo Use-After-Free (UAF) en Android OS con puntuación CVSS 9.6, afectando más del 80% del parque de dispositivos móviles en México y Latinoamérica. Esta falla permite a atacantes ejecutar código arbitrario con privilegios elevados, comprometiendo la integridad de datos corporativos y personales. El parche está disponible a través de actualizaciones del sistema en todos los dispositivos Android.

google-androidseguridad-movilandroid-os CVSS 9.6 NVD

G Crítico vulnerabilidad

04/06/2026

Vulnerabilidad crítica en Android OS (CVE-2026-11119) — CVSS 9.6

Google publica alerta sobre vulnerabilidad de severidad crítica en Android OS con puntuación CVSS 9.6. Afecta más del 80% de dispositivos móviles en México y Latinoamérica, incluyendo terminales corporativos. La explotación remota podría comprometer datos sensibles y control del dispositivo sin intervención del usuario.

google-androidseguridad-movilandroid-os CVSS 9.6 NVD

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11114] Use after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attac…

Use after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

nvdcriticovulnerabilidad CVSS 9.6 NVD

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11120] Insufficient validation of untrusted input in Enterprise Reporting in Google Chrome prior to 149.0.7…

Insufficient validation of untrusted input in Enterprise Reporting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

nvdcriticovulnerabilidad CVSS 9.6 NVD

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11112] Insufficient validation of untrusted input in Chromoting in Google Chrome on Linux prior to 149.0.78…

Insufficient validation of untrusted input in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted Chrome Extension. (Chromium security severity: Medium)

nvdcriticovulnerabilidad CVSS 9.6 NVD

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11113] Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed …

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

nvdcriticovulnerabilidad CVSS 9.6 NVD

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11100] Use after free in File Input in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacke…

Use after free in File Input in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

nvdcriticovulnerabilidad CVSS 9.6 NVD

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11094] Use after free in Codecs in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacke…

Use after free in Codecs in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

nvdcriticovulnerabilidad CVSS 9.6 NVD

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11095] Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed…

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

nvdcriticovulnerabilidad CVSS 9.6 NVD

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11088] Integer overflow in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had …

Integer overflow in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

nvdcriticovulnerabilidad CVSS 9.6 NVD

G Crítico vulnerabilidad

04/06/2026

Vulnerabilidad crítica en Android OS (CVE-2026-11082) - CVSS 9.6

Se ha identificado una vulnerabilidad crítica en Android OS con puntuación CVSS de 9.6 que afecta más del 80% de los dispositivos móviles en México y Latinoamérica. Esta falla de seguridad impacta directamente la confidencialidad, integridad y disponibilidad de datos en equipos corporativos y personales. Se recomienda aplicar parches de seguridad inmediatamente en todos los dispositivos.

google-androidseguridad-movilandroid-os CVSS 9.6 NVD

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11065] Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had co…

Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

nvdcriticovulnerabilidad CVSS 9.6 NVD

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11066] Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed …

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

nvdcriticovulnerabilidad CVSS 9.6 NVD

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11070] Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 149.0.…

Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the network process to potentially perform a sandbox escape via malicious network traffic. (Chromium security severity: Medium)

nvdcriticovulnerabilidad CVSS 9.6 NVD