Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI Noticias ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "X" — 16261 resultados ✕ Limpiar búsqueda
22,417
Total alertas
4761
Críticas
17025
Altas
8
Ransomware
1261
Esta semana
RSS
Vulnerabilidades × Limpiar todo ×
M Alto vulnerabilidad
29/09/2026
[CVE-2026-100777] Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.…
Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Crítico vulnerabilidad
29/09/2026
[CVE-2026-100778] Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed…
Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
nvdcriticovulnerabilidad CVSS 9.6 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-100779] Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157…
Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-100780] Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4,…
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-100768] Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 157.
Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 157.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-100769] Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR…
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Crítico vulnerabilidad
29/09/2026
[CVE-2026-100770] Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was…
Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
nvdcriticovulnerabilidad CVSS 9.6 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
29/09/2026
[CVE-2026-100772] Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4,…
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-100773] Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox ESR 153.…
Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-100774] Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4,…
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-100757] Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 1…
Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-100761] Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was…
Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 157.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Crítico vulnerabilidad
29/09/2026
[CVE-2026-100762] Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was…
Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
nvdcriticovulnerabilidad CVSS 9.6 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-100764] Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component. This vu…
Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 157.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-100765] Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR…
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.
nvdaltovulnerabilidad CVSS 8.8 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
29/09/2026
[CVE-2026-100767] Use-after-free in the Networking: Cache component. This vulnerability was fixed in Firefox ESR 153.4…
Use-after-free in the Networking: Cache component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
29/09/2026
Vulnerabilidad de Autorización en Qorela DC de Interprobe permite Escalada de Privilegios
Una vulnerabilidad de autorización faltante en Qorela DC (versiones 1.6.1-RC29 anteriores a 1.6.2) permite a usuarios autenticados elevar sus privilegios sin autorización adecuada. Afecta infraestructuras de centros de datos en México y Latinoamérica que utilicen esta plataforma de gestión. El CVSS 8.8 indica riesgo alta para la confidencialidad e integridad de sistemas altas.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
29/09/2026
Desbordamiento de búfer en RPM permite ejecución de código mediante paquetes maliciosos
Se identificó una vulnerabilidad alta en RPM que permite a atacantes ejecutar código arbitrario al procesar paquetes RPM manipulados con entradas de enlace simbólico especialmente crafteadas. La falla explota un desbordamiento de enteros en la función iterReadArchiveNext() que reduce la asignación de búfer a un byte, permitiendo escribir datos controlados más allá de los límites de memoria. Esta vulnerabilidad afecta directamente a servidores Linux en infraestructuras cloud, on-premises y repositorios de paquetes en empresas LATAM que utilizan sistemas basados en RHEL, CentOS, Fedora u otras distribuciones RPM.
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-102495] Apache XmlSchema doesn't limit how deeply schema imports and includes can be nested, so a malicious …
Apache XmlSchema doesn't limit how deeply schema imports and includes can be nested, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial of service. Users are recommended to upgrade to version 2.3.3, which fixes this issue.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-102496] Apache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema …
Apache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema model, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial of service. Users are recommended to upgrade to version 2.3.3, which fixes this issue.
nvdaltovulnerabilidad CVSS 7.5 NVD