Vulnerabilidades — Alertas SI

M Alto vulnerabilidad

09/09/2026

[CVE-2026-87823] zstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three direct-ByteBuffer frame-size …

zstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three direct-ByteBuffer frame-size native methods, allowing out-of-bounds memory reads via negative or overflowing offsets. Attackers can supply negative offset values near Integer.MIN_VALUE to read unmapped memory, causing JVM termination or extracting arbitrary frame size data from unintended memory locations.

M Alto vulnerabilidad

09/09/2026

[CVE-2026-56711] VLC media player computes the size of a picture buffer with 32-bit arithmetic and allocates from the…

VLC media player computes the size of a picture buffer with 32-bit arithmetic and allocates from the wrapped result. In AllocatePicture in src/misc/picture.c the running total is accumulated as i_bytes += p->i_pitch * p->i_lines, and both plane_t fields are declared int in include/vlc_picture.h, so the multiplication is evaluated at 32 bits and wraps before it is widened to the size_t accumulator.…

G Crítico vulnerabilidad

09/09/2026

[CVE-2026-87643] Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attac…

Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

M Alto vulnerabilidad

08/09/2026

[CVE-2026-81987] Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability that could result in a…

Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

M Alto vulnerabilidad

08/09/2026

[CVE-2026-82007] Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result i…

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

M Alto vulnerabilidad

08/09/2026

[CVE-2026-75771] Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result i…

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

M Alto vulnerabilidad

08/09/2026

[CVE-2026-75862] Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result i…

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

M Alto vulnerabilidad

08/09/2026

[CVE-2026-75863] Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result i…

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

M Alto vulnerabilidad

08/09/2026

[CVE-2026-49927] In multiple locations, there is a possible out of bounds write due to an integer overflow. This coul…

In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

M Alto vulnerabilidad

08/09/2026

[CVE-2026-84000] Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute …

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.

M Alto vulnerabilidad

08/09/2026

[CVE-2026-81959] Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code…

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

08/09/2026

[CVE-2026-81949] Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute …

Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

08/09/2026

[CVE-2026-77486] Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a …

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

08/09/2026

[CVE-2026-73002] Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate…

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

M Alto vulnerabilidad

08/09/2026

[CVE-2026-72995] Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri…

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

M Alto vulnerabilidad

08/09/2026

[CVE-2026-72990] Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri…

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

M Alto vulnerabilidad

08/09/2026

[CVE-2026-72986] Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a n…

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

08/09/2026

[CVE-2026-71336] Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execu…

Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network.

M Alto vulnerabilidad

08/09/2026

[CVE-2026-70581] Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate…

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

M Alto vulnerabilidad

08/09/2026

[CVE-2026-70572] Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate…

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Alertas de Seguridad de la Información

📬 Alertas semanales SI directo en tu email

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?