Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "Microsoft" — 1746 resultados ✕ Limpiar búsqueda
22,181
Total alertas
4701
Críticas
16892
Altas
8
Ransomware
1054
Esta semana
RSS
Vulnerabilidades × Limpiar todo ×
G Medio vulnerabilidad
28/08/2026
Chromium: CVE-2026-79099 Missing authorization in Network
Microsoft publica advisory de seguridad: Chromium: CVE-2026-79099 Missing authorization in Network.
Microsoft MSRC
G Medio vulnerabilidad
28/08/2026
Chromium: CVE-2026-79103 Incorrect reference resolution in Speech
Microsoft publica advisory de seguridad: Chromium: CVE-2026-79103 Incorrect reference resolution in Speech.
Microsoft MSRC
G Medio vulnerabilidad
28/08/2026
Chromium: CVE-2026-79104 Missing authorization in Sensor
Microsoft publica advisory de seguridad: Chromium: CVE-2026-79104 Missing authorization in Sensor.
Microsoft MSRC
G Medio vulnerabilidad
28/08/2026
Chromium: CVE-2026-79106 Improper input validation in Input
Microsoft publica advisory de seguridad: Chromium: CVE-2026-79106 Improper input validation in Input.
Microsoft MSRC
G Medio vulnerabilidad
28/08/2026
Chromium: CVE-2026-79107 Incorrect authorization in TabGroups
Microsoft publica advisory de seguridad: Chromium: CVE-2026-79107 Incorrect authorization in TabGroups.
Microsoft MSRC
G Medio vulnerabilidad
28/08/2026
Chromium: CVE-2026-79108 UI misrepresentation in Web Authentication (Passkeys & Security Keys)
Microsoft publica advisory de seguridad: Chromium: CVE-2026-79108 UI misrepresentation in Web Authentication (Passkeys & Security Keys).
Microsoft MSRC
G Medio vulnerabilidad
28/08/2026
Chromium: CVE-2026-79110 Missing authorization in Preload
Microsoft publica advisory de seguridad: Chromium: CVE-2026-79110 Missing authorization in Preload.
Microsoft MSRC

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
G Medio vulnerabilidad
28/08/2026
Chromium: CVE-2026-79112 Out of bounds read in Skia
Microsoft publica advisory de seguridad: Chromium: CVE-2026-79112 Out of bounds read in Skia.
Microsoft MSRC
G Medio vulnerabilidad
28/08/2026
Chromium: CVE-2026-79116 Missing authorization in Viz
Microsoft publica advisory de seguridad: Chromium: CVE-2026-79116 Missing authorization in Viz.
Microsoft MSRC
M Medio vulnerabilidad
27/08/2026
CVE-2026-69550 Windows App for Mac Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-69550 Windows App for Mac Information Disclosure Vulnerability. Tipo: Divulgación de Información.
windowsinfo-disclosure Microsoft MSRC
G Alto vulnerabilidad
25/08/2026
[CVE-2026-78915] Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjace…
Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
24/08/2026
CVE-2026-50661 Windows BitLocker Security Feature Bypass Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-50661 Windows BitLocker Security Feature Bypass Vulnerability. Tipo: Bypass de Característica de Seguridad.
windowssfb Microsoft MSRC
M Alto vulnerabilidad
21/08/2026
[CVE-2026-62316] Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior t…
Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, ufo/client/mcp/http_servers/linux_mcp_server.py binds a FastMCP streamable HTTP server to localhost:8010 but does not validate the Host, Origin, or Sec-Fetch-Site headers. An attacker-controlled web page can use DNS rebinding to reach the local /mcp endpoint, enumerate tool schemas through …
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
21/08/2026
CVE-2026-58547 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-58547 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).
windowseop Microsoft MSRC
M Medio vulnerabilidad
21/08/2026
CVE-2026-64899 Microsoft Office Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-64899 Microsoft Office Information Disclosure Vulnerability. Tipo: Divulgación de Información.
officeinfo-disclosure Microsoft MSRC

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
20/08/2026
[CVE-2026-69855] Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to di…
Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to disclose information over a network.
nvdaltovulnerabilidad CVSS 7.7 NVD
M Alto vulnerabilidad
20/08/2026
[CVE-2026-69558] Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized …
Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose information over a network.
nvdaltovulnerabilidad CVSS 8.6 NVD
M Crítico vulnerabilidad
20/08/2026
[CVE-2026-69836] Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute c…
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.
nvdcriticovulnerabilidad CVSS 10.0 NVD
M Crítico vulnerabilidad
20/08/2026
[CVE-2026-65801] Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to e…
Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network.
nvdcriticovulnerabilidad CVSS 10.0 NVD
M Crítico vulnerabilidad
20/08/2026
[CVE-2026-63509] Relative path traversal in Microsoft Fabric allows an authorized attacker to elevate privileges over…
Relative path traversal in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.
nvdcriticovulnerabilidad CVSS 9.9 NVD