Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "Microsoft" — 1234 resultados ✕ Limpiar búsqueda
13,566
Total alertas
3081
Críticas
10213
Altas
8
Ransomware
1781
Esta semana
RSS
Vulnerabilidades × Limpiar todo ×
M Alto vulnerabilidad
14/07/2026
CVE-2026-58279 Azure CycleCloud Elevation of Privilege Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-58279 Azure CycleCloud Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).
azureeop Microsoft MSRC
M Alto vulnerabilidad
14/07/2026
CVE-2026-58614 Windows Kernel Security Feature Bypass Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-58614 Windows Kernel Security Feature Bypass Vulnerability. Tipo: Bypass de Característica de Seguridad.
windowssfb Microsoft MSRC
M Medio vulnerabilidad
14/07/2026
CVE-2026-33842 Windows File Explorer Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-33842 Windows File Explorer Information Disclosure Vulnerability. Tipo: Divulgación de Información.
windowsinfo-disclosure Microsoft MSRC
M Medio vulnerabilidad
14/07/2026
CVE-2026-34328 Windows Audio Service Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-34328 Windows Audio Service Information Disclosure Vulnerability. Tipo: Divulgación de Información.
windowsinfo-disclosure Microsoft MSRC
M Medio vulnerabilidad
14/07/2026
CVE-2026-40422 Windows File Explorer Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-40422 Windows File Explorer Information Disclosure Vulnerability. Tipo: Divulgación de Información.
windowsinfo-disclosure Microsoft MSRC
M Medio vulnerabilidad
14/07/2026
CVE-2026-41087 Windows File Explorer Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-41087 Windows File Explorer Information Disclosure Vulnerability. Tipo: Divulgación de Información.
windowsinfo-disclosure Microsoft MSRC
M Medio vulnerabilidad
14/07/2026
CVE-2026-34348 Windows Event Logging Service Information Disclosure Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-34348 Windows Event Logging Service Information Disclosure Vulnerability. Tipo: Divulgación de Información.
windowsinfo-disclosure Microsoft MSRC

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Medio vulnerabilidad
14/07/2026
CVE-2026-44806 Windows Secure Channel Denial of Service Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-44806 Windows Secure Channel Denial of Service Vulnerability. Tipo: Denegación de Servicio (DoS).
windowsdos Microsoft MSRC
M Alto vulnerabilidad
14/07/2026
[CVE-2026-0487] SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) files from a…
SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) files from an untrusted location, allowing them to execute malicious code on the system. This could enable the attacker to hijack the DLL loading process and achieve arbitrary code execution. This has high impact on confidentiality, integrity and availability of the system.
nvdaltovulnerabilidad CVSS 8.4 NVD
M Alto vulnerabilidad
14/07/2026
[CVE-2026-56155] Vulnerabilidad explotada activamente en Microsoft Active Directory Federation Services
CISA confirma explotación activa de una vulnerabilidad en Microsoft Active Directory Federation Services. No se ha confirmado uso en campañas de ransomware conocidas. Fecha límite para aplicar parche según directiva CISA: 2026-07-28.
explotación activavulnerabilidad CISA KEV
M Alto vulnerabilidad
14/07/2026
[CVE-2026-56164] Vulnerabilidad explotada activamente en Microsoft SharePoint Server
CISA confirma explotación activa de una vulnerabilidad en Microsoft SharePoint Server. No se ha confirmado uso en campañas de ransomware conocidas. Fecha límite para aplicar parche según directiva CISA: 2026-07-17.
explotación activavulnerabilidad CISA KEV
M Alto vulnerabilidad
12/07/2026
[CVE-2026-58596] Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to …
Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
nvdaltovulnerabilidad CVSS 8.3 NVD
M Alto vulnerabilidad
11/07/2026
[CVE-2026-58281] Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker…
Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 8.3 NVD
E Alto vulnerabilidad
10/07/2026
[CVE-2026-59161] Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.1…
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, the streaming worksheet reader used by Rows and GetRows does not enforce the TotalRows limit on the row r attribute, allowing a small XLSX file with a row number above 1048576 and no cell coordinate to make GetRows append empty rows up to the attacker-controlled index and consume excessive memo…
nvdaltovulnerabilidad CVSS 7.5 NVD
E Alto vulnerabilidad
10/07/2026
[CVE-2026-59162] Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.1…
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, Excelize parses shared-string cell values with strconv.Atoi and checks only the upper bound before indexing the shared string slice, allowing an XLSX file containing a shared-string cell with -1 to trigger sharedStrings[-1] and panic when read through GetCellValue or GetRows. This issue is fixe…
nvdaltovulnerabilidad CVSS 7.5 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
E Alto vulnerabilidad
10/07/2026
[CVE-2026-54063] Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.1…
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, the checkSheet() function in github.com/xuri/excelize/v2 uses an attacker-controlled XML attribute value directly as the length argument to make([]xlsxRow, row) without validating it against the Excel row limit (TotalRows = 1,048,576). A specially crafted XLSX file can trigger two d…
nvdaltovulnerabilidad CVSS 7.5 NVD
P Alto vulnerabilidad
09/07/2026
[CVE-2026-0278] Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP) compone…
Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP) component for Windows allow a local user to bypass DLP policy enforcement controls. The Prisma Access Agent on macOS is not affected.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Crítico vulnerabilidad
09/07/2026
[CVE-2026-47646] Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365…
Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Customer Voice allows an unauthorized attacker to perform spoofing over a network.
nvdcriticovulnerabilidad CVSS 9.3 NVD
G Alto vulnerabilidad
08/07/2026
[CVE-2026-15120] Use after free in Core in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker…
Use after free in Core in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.3 NVD
G Alto vulnerabilidad
08/07/2026
[CVE-2026-15122] Insufficient validation of untrusted input in Codecs in Google Chrome on Windows prior to 150.0.7871…
Insufficient validation of untrusted input in Codecs in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.3 NVD