Vulnerabilidades — Alertas SI

M Alto vulnerabilidad

16/06/2026

[CVE-2026-12314] Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140…

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

M Alto vulnerabilidad

16/06/2026

[CVE-2026-12310] Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140…

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

M Alto vulnerabilidad

16/06/2026

[CVE-2026-12291] Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firef…

Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

M Crítico vulnerabilidad

16/06/2026

[CVE-2026-12293] Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Th…

Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

M Alto vulnerabilidad

15/06/2026

[CVE-2026-6040] A heap use-after-free existed when importing the blank-width characters of an ODF number format. A p…

A heap use-after-free existed when importing the blank-width characters of an ODF number format. A position value read from the document was not checked against the length of the format-code string, so a malformed number format could be processed against memory outside that string. In fixed versions the position is bounds-checked before use.

M Alto vulnerabilidad

12/06/2026

[CVE-2026-41158] Software installed and run as a non-privileged user may conduct GPU system calls to write to arbitra…

Software installed and run as a non-privileged user may conduct GPU system calls to write to arbitrary freed physical pages. Physical memory allocated and freed, without the deferred free mechanism can lead to those resources being used for read/write by the GPU after the kernel module has freed the resource.

M Alto vulnerabilidad

12/06/2026

[CVE-2026-11933] A use-after-free vulnerability exists in MongoDB Server's server-side JavaScript engine when convert…

A use-after-free vulnerability exists in MongoDB Server's server-side JavaScript engine when converting BSON documents to JavaScript arrays. An authenticated user with read privileges who is able to run server-side JavaScript (for example, via $where or $function) can cause the server to access memory that has already been freed. This may result in disclosure of information from the mongod process…

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12035] Use after free in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacke…

Use after free in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12028] Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker …

Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12029] Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacke…

Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12020] Use after free in Autofill in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker…

Use after free in Autofill in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12023] Use after free in GPU in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who …

Use after free in GPU in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12008] Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attac…

Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12011] Use after free in WebMIDI in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attac…

Use after free in WebMIDI in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12012] Use after free in Network in Google Chrome prior to 149.0.7827.115 allowed an attacker in a privileg…

Use after free in Network in Google Chrome prior to 149.0.7827.115 allowed an attacker in a privileged network position to potentially exploit heap corruption via malicious network traffic. (Chromium security severity: High)

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12014] Use after free in Cast in Google Chrome prior to 149.0.7827.115 allowed an attacker on the local net…

Use after free in Cast in Google Chrome prior to 149.0.7827.115 allowed an attacker on the local network segment to potentially perform a sandbox escape via malicious network traffic. (Chromium security severity: High)

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12007] Use after free in Core in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker…

Use after free in Core in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

A Alto vulnerabilidad

09/06/2026

[CVE-2026-47955] Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vuln…

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

A Alto vulnerabilidad

09/06/2026

[CVE-2026-47921] Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vuln…

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

A Alto vulnerabilidad

09/06/2026

[CVE-2026-47913] Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vuln…

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Alertas de Seguridad de la Información

📬 Alertas semanales SI directo en tu email

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?