Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI Noticias ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada hace 37 min
22,340
Total alertas
4744
Críticas
16966
Altas
8
Ransomware
1210
Esta semana
RSS
Vulnerabilidades × nvd × Limpiar todo ×
F Crítico vulnerabilidad
09/06/2026
[CVE-2026-49840] FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary …
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, esl_recv_event() parses Content-Length with atol() and passes the result straight to malloc(len + 1) with no sign or magnitude check. A malicious or man-in-the-middle ESL peer can send a frame…
nvdcriticovulnerabilidad CVSS 9.1 NVD
F Crítico vulnerabilidad
09/06/2026
[CVE-2026-49841] FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary …
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, the mod_verto HTTP request handler allocates a fixed 2 MiB buffer for a POST application/x-www-form-urlencoded body but accepts Content-Length up to just under 10 MiB. The body-read loop is bo…
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Alto vulnerabilidad
09/06/2026
[CVE-2026-48574] Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
09/06/2026
[CVE-2026-48575] Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a securi…
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
nvdaltovulnerabilidad CVSS 7.9 NVD
M Alto vulnerabilidad
09/06/2026
[CVE-2026-48576] No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feat…
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
nvdaltovulnerabilidad CVSS 7.9 NVD
M Alto vulnerabilidad
09/06/2026
[CVE-2026-48578] Improper access control in Windows Secure Boot allows an authorized attacker to elevate privileges l…
Improper access control in Windows Secure Boot allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.9 NVD
M Alto vulnerabilidad
09/06/2026
[CVE-2026-48583] Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.8 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
09/06/2026
[CVE-2026-49160] Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a n…
Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a network.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
09/06/2026
[CVE-2026-48565] Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privilege…
Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
09/06/2026
[CVE-2026-48568] Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a securi…
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
nvdaltovulnerabilidad CVSS 7.9 NVD
M Alto vulnerabilidad
09/06/2026
[CVE-2026-48569] Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security…
Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
09/06/2026
[CVE-2026-48570] Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a securi…
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
nvdaltovulnerabilidad CVSS 7.9 NVD
M Alto vulnerabilidad
09/06/2026
[CVE-2026-48573] No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feat…
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
nvdaltovulnerabilidad CVSS 7.9 NVD
M Alto vulnerabilidad
09/06/2026
[CVE-2026-48563] Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo…
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
09/06/2026
[CVE-2026-47656] Protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a secur…
Protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature locally.
nvdaltovulnerabilidad CVSS 7.9 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Crítico vulnerabilidad
09/06/2026
[CVE-2026-47643] External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute…
External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Alto vulnerabilidad
09/06/2026
[CVE-2026-47648] Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally…
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.0 NVD
M Alto vulnerabilidad
09/06/2026
[CVE-2026-47652] Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
09/06/2026
[CVE-2026-47653] Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo…
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
09/06/2026
[CVE-2026-47654] Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo…
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 7.5 NVD