Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "Google" — 1248 resultados ✕ Limpiar búsqueda
22,181
Total alertas
4701
Críticas
16892
Altas
8
Ransomware
1051
Esta semana
RSS
Vulnerabilidades × Limpiar todo ×
G Crítico vulnerabilidad
30/06/2026
[CVE-2026-13781] Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.47 allowed a…
Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
nvdcriticovulnerabilidad CVSS 9.6 NVD
G Crítico vulnerabilidad
29/06/2026
[CVE-2026-11720] A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When …
A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When constructing downstream API requests, the URL builder substitutes user-controlled pathParams into the configured tool path and parses the resulting string as a relative URL. While it checks that the input does not alter the scheme, host, or user info, it relies on ResolveReference for the final URL …
nvdcriticovulnerabilidad CVSS 9.1 NVD
G Alto vulnerabilidad
25/06/2026
[CVE-2026-13283] Use after free in AdFilter in Google Chrome on Android prior to 149.0.7827.201 allowed a remote atta…
Use after free in AdFilter in Google Chrome on Android prior to 149.0.7827.201 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 7.5 NVD
G Alto vulnerabilidad
25/06/2026
[CVE-2026-13281] Integer overflow in Mojo in Google Chrome prior to 149.0.7827.201 allowed a remote attacker who had …
Integer overflow in Mojo in Google Chrome prior to 149.0.7827.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.3 NVD
M Alto vulnerabilidad
25/06/2026
[CVE-2026-56767] Maxun before 0.0.42 contains a cross-tenant insecure direct object reference vulnerability in storag…
Maxun before 0.0.42 contains a cross-tenant insecure direct object reference vulnerability in storage and webhook API handlers that allows authenticated users to access other users' robots and OAuth tokens. Attackers can read plaintext Google and Airtable access tokens, modify, delete, or execute other users' robots by bypassing ownership checks in API endpoints.
nvdaltovulnerabilidad CVSS 8.8 NVD
G Alto vulnerabilidad
24/06/2026
[CVE-2026-13038] Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.197 allowed a remote atta…
Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Crítico vulnerabilidad
24/06/2026
[CVE-2026-13028] Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacke…
Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
nvdcriticovulnerabilidad CVSS 9.6 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
G Alto vulnerabilidad
24/06/2026
[CVE-2026-13029] Use after free in Web Authentication in Google Chrome prior to 149.0.7827.197 allowed an attacker wh…
Use after free in Web Authentication in Google Chrome prior to 149.0.7827.197 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 7.5 NVD
G Alto vulnerabilidad
24/06/2026
[CVE-2026-13031] Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execut…
Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Crítico vulnerabilidad
24/06/2026
[CVE-2026-13032] Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacke…
Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
nvdcriticovulnerabilidad CVSS 9.6 NVD
G Alto vulnerabilidad
24/06/2026
[CVE-2026-13033] Out of bounds read and write in Blink>InterestGroups in Google Chrome prior to 149.0.7827.197 allowe…
Out of bounds read and write in Blink>InterestGroups in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Alto vulnerabilidad
24/06/2026
[CVE-2026-13035] Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacke…
Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code via a malicious peripheral. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Alto vulnerabilidad
24/06/2026
[CVE-2026-13036] Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execut…
Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Alto vulnerabilidad
24/06/2026
[CVE-2026-13037] Use after free in WebView in Google Chrome on Android prior to 149.0.7827.197 allowed a local attack…
Use after free in WebView in Google Chrome on Android prior to 149.0.7827.197 allowed a local attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 7.8 NVD
G Alto vulnerabilidad
24/06/2026
[CVE-2026-13025] Race in DevTools in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromi…
Race in DevTools in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.3 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
G Alto vulnerabilidad
24/06/2026
[CVE-2026-13026] Use after free in Digital Credentials in Google Chrome on Mac prior to 149.0.7827.197 allowed a remo…
Use after free in Digital Credentials in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Alto vulnerabilidad
24/06/2026
[CVE-2026-13027] Use after free in FileSystem in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to p…
Use after free in FileSystem in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Alto vulnerabilidad
24/06/2026
[CVE-2026-12537] Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versio…
Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox host-level code execution a maliciously crafted .gemini/.env file.
nvdaltovulnerabilidad CVSS 7.8 NVD
H Alto vulnerabilidad
23/06/2026
[CVE-2026-54318] Home Assistant is open source home automation software that puts local control and privacy first. Pr…
Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.5.3, the LocationSensorManager BroadcastReceiver is exported with no permission. Any installed app, with zero runtime permissions, can broadcast a forged Google Play Services LocationResult directly to it; the receiver trusts the extra and forwards it to the user's Home Assistant server …
nvdaltovulnerabilidad CVSS 7.1 NVD
P Alto vulnerabilidad
22/06/2026
[CVE-2026-48712] protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.1 and 8.4.1, p…
protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.1 and 8.4.1, protobufjs could recurse without a depth limit while converting decoded messages to plain objects or JSON. This affected generated toObject() conversion and the custom google.protobuf.Any JSON conversion path. A crafted protobuf binary payload containing deeply nested Any values could cause the JavaS…
nvdaltovulnerabilidad CVSS 7.5 NVD