Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada ahora mismo

13,509

Total alertas

3066

Críticas

10171

Altas

8

Ransomware

1810

Esta semana

RSS

Vulnerabilidades × cwe-125 × Limpiar todo ×

M Alto vulnerabilidad

[CVE-2026-44822] Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information…

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

M Alto vulnerabilidad

[CVE-2026-44808] Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate priv…

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

M Alto vulnerabilidad

[CVE-2026-42908] Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a net…

Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.

M Alto vulnerabilidad

[CVE-2026-42837] Out-of-bounds read in Windows Projected File System Filter Driver allows an authorized attacker to e…

Out-of-bounds read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.

O Alto vulnerabilidad

[CVE-2026-34180] Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content …

Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platforms. Impact summary: The heap buffer over-read may crash the application (Denial of Service) or to load into the decoded ASN.1 object contents of memory beyond the end of the input buffer. More typic…

G Alto vulnerabilidad

[CVE-2026-11690] Out of bounds read and write in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remo…

Out of bounds read and write in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

G Alto vulnerabilidad

[CVE-2026-11667] Out of bounds read in WebRTC in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who …

Out of bounds read in WebRTC in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the GPU process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →

L Alto vulnerabilidad

[CVE-2026-46307] In the Linux kernel, the following vulnerability has been resolved: wifi: ath5k: do not access arra…

In the Linux kernel, the following vulnerability has been resolved: wifi: ath5k: do not access array OOB Vincent reports: > The ath5k driver seems to do an array-index-out-of-bounds access as > shown by the UBSAN kernel message: > UBSAN: array-index-out-of-bounds in drivers/net/wireless/ath/ath5k/base.c:1741:20 > index 4 is out of range for type 'ieee80211_tx_rate [4]' > ... > Call Trace: >

L Alto vulnerabilidad

[CVE-2026-46293] In the Linux kernel, the following vulnerability has been resolved: clk: microchip: mpfs-ccc: fix o…

In the Linux kernel, the following vulnerability has been resolved: clk: microchip: mpfs-ccc: fix out of bounds access during output registration UBSAN reported an out of bounds access during registration of the last two outputs. This out of bounds access occurs because space is only allocated in the hws array for two PLLs and the four output dividers that each has, but the defined IDs contain t…

A Alto vulnerabilidad

[CVE-2026-44185] Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker contr…

Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

G Alto vulnerabilidad

[CVE-2026-11301] Inappropriate implementation in LiveCaption in Google Chrome prior to 149.0.7827.53 allowed a remote…

Inappropriate implementation in LiveCaption in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via malicious network traffic. (Chromium security severity: Low)

G Alto vulnerabilidad

[CVE-2026-11279] Out of bounds read in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to …

Out of bounds read in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)

G Alto vulnerabilidad

[CVE-2026-11256] Integer overflow in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had co…

Integer overflow in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

G Alto vulnerabilidad

[CVE-2026-11191] Out of bounds memory access in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attack…

Out of bounds memory access in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)

G Alto vulnerabilidad

[CVE-2026-11111] Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to per…

Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →

G Alto vulnerabilidad

[CVE-2026-11091] Inappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attack…

Inappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)

G Alto vulnerabilidad

[CVE-2026-11077] Bad cast in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitr…

Bad cast in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

G Crítico vulnerabilidad

[CVE-2026-11061] Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potenti…

Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

G Alto vulnerabilidad

[CVE-2026-11015] Out of bounds read in WebGPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to pe…

Out of bounds read in WebGPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)

G Alto vulnerabilidad

[CVE-2026-10941] Out of bounds memory access in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacke…

Out of bounds memory access in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

← Anterior 1 … 11 12 13 14 Siguiente →