Vulnerabilidades — Alertas SI

M Alto vulnerabilidad

02/07/2026

[CVE-2026-13132] GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is…

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. The Websocket server can accept v…

M Alto vulnerabilidad

02/07/2026

[CVE-2026-57264] GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is…

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. The Websocket server can accept v…

M Alto vulnerabilidad

02/07/2026

[CVE-2026-57265] GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is…

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. The Websocket server can accept v…

M Alto vulnerabilidad

02/07/2026

[CVE-2026-13125] GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is…

GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. In order to access the websocket …

G Crítico vulnerabilidad

01/07/2026

[CVE-2026-14425] Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potenti…

Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Alto vulnerabilidad

01/07/2026

[CVE-2026-14426] Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who convinced…

Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

G Alto vulnerabilidad

01/07/2026

[CVE-2026-14427] Heap buffer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who h…

Heap buffer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

G Alto vulnerabilidad

01/07/2026

[CVE-2026-14428] Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.4…

Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Alto vulnerabilidad

01/07/2026

[CVE-2026-14429] Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a…

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Alto vulnerabilidad

01/07/2026

[CVE-2026-14430] Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute …

Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

G Alto vulnerabilidad

01/07/2026

[CVE-2026-14431] Type Confusion in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute ar…

Type Confusion in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

G Alto vulnerabilidad

01/07/2026

[CVE-2026-14432] Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute ar…

Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

G Crítico vulnerabilidad

01/07/2026

[CVE-2026-14416] Out of bounds read in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to pote…

Out of bounds read in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

G Crítico vulnerabilidad

01/07/2026

[CVE-2026-14417] Use after free in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentia…

Use after free in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

G Crítico vulnerabilidad

01/07/2026

[CVE-2026-14419] Use after free in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentia…

Use after free in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

G Crítico vulnerabilidad

01/07/2026

[CVE-2026-14420] Out of bounds read and write in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attack…

Out of bounds read and write in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

G Alto vulnerabilidad

01/07/2026

[CVE-2026-14422] Out of bounds read and write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attack…

Out of bounds read and write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

G Crítico vulnerabilidad

01/07/2026

[CVE-2026-14423] Type Confusion in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentia…

Type Confusion in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Crítico vulnerabilidad

01/07/2026

[CVE-2026-14424] Use after free in Dawn in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to p…

Use after free in Dawn in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Alto vulnerabilidad

01/07/2026

[CVE-2026-14407] Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker…

Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

Alertas de Seguridad de la Información

📬 Alertas semanales SI directo en tu email

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?