Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada hace 23 min

Buscando: "Microsoft" — 1746 resultados ✕ Limpiar búsqueda

22,181

Total alertas

4701

Críticas

16892

Altas

8

Ransomware

1051

Esta semana

RSS

Vulnerabilidades × Limpiar todo ×

M Alto vulnerabilidad

[CVE-2026-63526] Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code loca…

Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-63527] Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code…

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-63518] Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code …

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-63519] Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local…

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-63520] Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute …

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-63513] Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local…

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-63514] Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex…

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →

M Alto vulnerabilidad

[CVE-2026-63515] Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-62911] Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker t…

Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

M Alto vulnerabilidad

[CVE-2026-62913] Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute cod…

Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-62914] Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ex…

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.

M Alto vulnerabilidad

[CVE-2026-62910] Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows …

Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

M Alto vulnerabilidad

[CVE-2026-62898] Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a netw…

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

M Alto vulnerabilidad

[CVE-2026-62827] Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate priv…

Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

M Crítico vulnerabilidad

[CVE-2026-62815] Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →

M Alto vulnerabilidad

[CVE-2026-62784] Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorize…

Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-62698] Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate…

Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally.

M Alto vulnerabilidad

[CVE-2026-59133] Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an a…

Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an authorized attacker to elevate privileges over a network.

M Crítico vulnerabilidad

[CVE-2026-59124] Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unaut…

Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-58651] Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code …

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

← Anterior 1 … 30 31 32 33 34 … 88 Siguiente →