Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "Microsoft" — 1746 resultados ✕ Limpiar búsqueda
22,181
Total alertas
4701
Críticas
16892
Altas
8
Ransomware
1054
Esta semana
RSS
Vulnerabilidades × Limpiar todo ×
M Medio vulnerabilidad
20/08/2026
CVE-2026-70105 Microsoft Word Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-70105 Microsoft Word Information Disclosure Vulnerability. Tipo: Divulgación de Información.
info-disclosure Microsoft MSRC
M Alto vulnerabilidad
20/08/2026
CVE-2026-69502 Azure SQL Database Elevation of Privilege Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-69502 Azure SQL Database Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).
azureeop Microsoft MSRC
M Crítico vulnerabilidad
20/08/2026
CVE-2026-33824 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-33824 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability. Tipo: Ejecución Remota de Código (RCE).
windowsrce Microsoft MSRC
M Alto vulnerabilidad
19/08/2026
CVE-2020-1173 Microsoft Power BI Report Server Spoofing Vulnerability
Microsoft publica advisory de seguridad: CVE-2020-1173 Microsoft Power BI Report Server Spoofing Vulnerability. Tipo: Suplantación (Spoofing).
spoofing Microsoft MSRC
M Medio vulnerabilidad
19/08/2026
CVE-2021-26859 Microsoft Power BI Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2021-26859 Microsoft Power BI Information Disclosure Vulnerability. Tipo: Divulgación de Información.
info-disclosure Microsoft MSRC
M Alto vulnerabilidad
19/08/2026
CVE-2021-41372 Power BI Report Server Spoofing Vulnerability
Microsoft publica advisory de seguridad: CVE-2021-41372 Power BI Report Server Spoofing Vulnerability. Tipo: Suplantación (Spoofing).
spoofing Microsoft MSRC
M Alto vulnerabilidad
19/08/2026
CVE-2023-21806 Power BI Report Server Spoofing Vulnerability
Microsoft publica advisory de seguridad: CVE-2023-21806 Power BI Report Server Spoofing Vulnerability. Tipo: Suplantación (Spoofing).
spoofing Microsoft MSRC

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
19/08/2026
CVE-2024-43612 Power BI Report Server Spoofing Vulnerability
Microsoft publica advisory de seguridad: CVE-2024-43612 Power BI Report Server Spoofing Vulnerability. Tipo: Suplantación (Spoofing).
spoofing Microsoft MSRC
M Alto vulnerabilidad
19/08/2026
CVE-2024-43481 Power BI Report Server Spoofing Vulnerability
Microsoft publica advisory de seguridad: CVE-2024-43481 Power BI Report Server Spoofing Vulnerability. Tipo: Suplantación (Spoofing).
spoofing Microsoft MSRC
M Alto vulnerabilidad
18/08/2026
[CVE-2026-53958] 4gaBoards is a boards system for realtime project management. Prior to 3.3.9, 4gaBoards allows an au…
4gaBoards is a boards system for realtime project management. Prior to 3.3.9, 4gaBoards allows an authenticated user to modify ssoGoogleId, ssoGoogleEmail, ssoGithubId, ssoGithubUsername, ssoGithubEmail, ssoMicrosoftId, ssoMicrosoftEmail, ssoOidcId, and ssoOidcEmail through PATCH /api/users/:id. The whitelist in server/api/controllers/users/update.js mass assigns these backend-managed identity att…
nvdaltovulnerabilidad CVSS 7.6 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-50191] 4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards is vulnerabl…
4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards is vulnerable to pre-account takeover when registrationEnabled, localRegistrationEnabled, and ssoRegistrationEnabled are enabled and Google, GitHub, Microsoft, or OIDC SSO is configured. The POST /api/register endpoint permits creation of an unverified local account with a victim's email address, and POST /api/…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
18/08/2026
[CVE-2026-60998] Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen…
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Microsoft Active Directory). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows high privileged attacker with network access via LDAP to compromise Oracle Identity Manager Connector. While the vulnerability is in Oracle Identity Manage…
nvdaltovulnerabilidad CVSS 8.0 NVD
M Medio vulnerabilidad
18/08/2026
CVE-2026-24301 Microsoft Copilot Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-24301 Microsoft Copilot Information Disclosure Vulnerability. Tipo: Divulgación de Información.
info-disclosure Microsoft MSRC
M Medio vulnerabilidad
18/08/2026
CVE-2026-50419 Windows Kernel Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-50419 Windows Kernel Information Disclosure Vulnerability. Tipo: Divulgación de Información.
windowsinfo-disclosure Microsoft MSRC
M Alto vulnerabilidad
17/08/2026
[CVE-2026-74801] SiYuan before 3.7.4 fails to properly escape workspace directory paths when constructing command-lin…
SiYuan before 3.7.4 fails to properly escape workspace directory paths when constructing command-line arguments for the elevated elevator.exe helper process. Attackers can create a malicious workspace directory with command metacharacters in its path and trigger the Microsoft Defender exclusion flow to execute arbitrary commands with administrator privileges after UAC approval.
nvdaltovulnerabilidad CVSS 8.2 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
14/08/2026
[CVE-2026-69414] Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Micros…
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ". We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the update is available.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
14/08/2026
[CVE-2026-50523] Improper neutralization of special elements used in a command ('command injection') in Microsoft Pow…
Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
14/08/2026
[CVE-2026-72970] Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to exe…
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 8.3 NVD
G Medio vulnerabilidad
14/08/2026
Chromium: CVE-2026-19560 Use after free in Blink
Microsoft publica advisory de seguridad: Chromium: CVE-2026-19560 Use after free in Blink.
Microsoft MSRC
G Medio vulnerabilidad
14/08/2026
Chromium: CVE-2026-19559 Use after free in HTML
Microsoft publica advisory de seguridad: Chromium: CVE-2026-19559 Use after free in HTML.
Microsoft MSRC