Vulnerabilidades — Alertas SI

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11095] Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed…

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11088] Integer overflow in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had …

Integer overflow in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11065] Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had co…

Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11066] Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed …

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11061] Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potenti…

Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

G Alto vulnerabilidad

04/06/2026

[CVE-2026-11040] Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had co…

Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11029] Insufficient validation of untrusted input in Drag and Drop in Google Chrome on Android prior to 149…

Insufficient validation of untrusted input in Drag and Drop in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

G Alto vulnerabilidad

04/06/2026

[CVE-2026-10995] Heap buffer overflow in TabStrip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker w…

Heap buffer overflow in TabStrip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11002] Use after free in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had…

Use after free in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

G Alto vulnerabilidad

04/06/2026

[CVE-2026-10988] Use after free in Views in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had co…

Use after free in Views in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Alto vulnerabilidad

04/06/2026

[CVE-2026-10989] Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker…

Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-10990] Use after free in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had com…

Use after free in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-10983] Insufficient validation of untrusted input in Dawn in Google Chrome prior to 149.0.7827.53 allowed a…

Insufficient validation of untrusted input in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Alto vulnerabilidad

04/06/2026

[CVE-2026-10973] Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak …

Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-10974] Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed …

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Alto vulnerabilidad

04/06/2026

[CVE-2026-10976] Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtai…

Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-10966] Inappropriate implementation in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote atta…

Inappropriate implementation in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: High)

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-10931] Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to po…

Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Alto vulnerabilidad

01/04/2026

Vulnerabilidad crítica en Google Dawn bajo explotación activa

CISA ha confirmado la explotación activa de la vulnerabilidad CVE-2026-5281 en Google Dawn. Aunque no se ha detectado su uso en campañas de ransomware conocidas hasta el momento, la amenaza es inmediata. Las organizaciones en México y LATAM que utilizan este producto deben aplicar parches de seguridad antes del 15 de abril de 2026.

G Alto vulnerabilidad

13/03/2026

Vulnerabilidad crítica en Google Chromium V8 bajo explotación activa

CISA ha confirmado explotación activa de una vulnerabilidad en el motor V8 de Google Chromium, afectando navegadores basados en este código en México y Latinoamérica. Aunque no se ha reportado asociación con campañas de ransomware conocidas, la amenaza es inmediata. Todas las organizaciones deben aplicar parches antes del 27 de marzo de 2026 conforme a la directiva CISA BOD 22-01.

Alertas de Seguridad de la Información

📬 Alertas semanales SI directo en tu email

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?