Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada ahora mismo

22,181

Total alertas

4701

Críticas

16892

Altas

8

Ransomware

1054

Esta semana

RSS

Vulnerabilidades × cwe-122 × Limpiar todo ×

M Alto vulnerabilidad

[CVE-2026-75144] FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dirac RTP pac…

FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dirac RTP packetizer (libavformat/rtpenc_vc2hq.c) that allows attackers to trigger memory corruption by supplying a crafted Dirac data unit. The packetizer copies an input-derived data unit or fragment size into a fixed-size buffer without an upper bound check, causing a heap buffer overflow when the crafted inp…

M Alto vulnerabilidad

[CVE-2026-52834] jxl-oxide is a pure Rust implementation of a JPEG XL decoder. Prior to jxl-grid 0.6.2, decoding a cr…

jxl-oxide is a pure Rust implementation of a JPEG XL decoder. Prior to jxl-grid 0.6.2, decoding a crafted JPEG XL image on a 32-bit platform can overflow length calculations in AlignedGrid::with_alloc_tracker and related grid and subgrid arithmetic. A 65536 x 65536 frame can pass the frame-area limit while overflowing the usize element count, causing modular, VarDCT, or filter rendering paths to a…

M Alto vulnerabilidad

[CVE-2026-49429] The ZFS_IOC_USERSPACE_MANY ioctl, used by zfs-userspace(8), truncated a 64-bit output buffer size to…

The ZFS_IOC_USERSPACE_MANY ioctl, used by zfs-userspace(8), truncated a 64-bit output buffer size to a 32-bit integer for the kernel allocation, but used the original 64-bit size as the buffer limit when writing records. A local user with the "userused" delegated ZFS permission can trigger a kernel heap overflow via the ZFS_IOC_USERSPACE_MANY ioctl, potentially escalating privileges.

M Alto vulnerabilidad

[CVE-2026-72970] Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to exe…

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-19385] Heap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator…

Heap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator to execute arbitrary code as the operating system user running pg_dump, via a crafted transform list. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

M Alto vulnerabilidad

[CVE-2026-14669] Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to ex…

Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a long POSIX timezone abbreviation. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

M Alto vulnerabilidad

[CVE-2026-14670] Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute…

Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user running the database, via a crafted function body. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →

M Alto vulnerabilidad

[CVE-2026-14676] Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary c…

Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries containing array constants. Within major version 18, minor versions before PostgreSQL 18.5 are affected. Versions before PostgreSQL 18 are unaffected.

M Alto vulnerabilidad

[CVE-2026-14664] Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the o…

Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006, but this case involved unanticipated data growth when round-tripped through pg_wchar. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

M Alto vulnerabilidad

[CVE-2026-19004] An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when …

An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output parameters from a stored procedure. Triggering this issue requires connecting to an untrusted or impersonated database server that returns crafted metadata. This may result in process termination, disclosure of process memory, or, under certain conditions, arbitrary code execution.

M Alto vulnerabilidad

[CVE-2026-71331] Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation …

Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-70347] Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges …

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

M Alto vulnerabilidad

[CVE-2026-70345] Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges …

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

M Alto vulnerabilidad

[CVE-2026-70130] Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local…

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-68812] Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code…

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →

M Alto vulnerabilidad

[CVE-2026-68815] Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code…

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-68804] Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code l…

Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-68805] Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code…

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-68807] Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code…

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-68796] Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code…

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

← Anterior 1 … 20 21 22 23 24 … 38 Siguiente →