Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
13,509
Total alertas
3066
Críticas
10171
Altas
8
Ransomware
1810
Esta semana
RSS
Vulnerabilidades × cwe-416 × Limpiar todo ×
M Alto vulnerabilidad
24/07/2026
[CVE-2026-49743] Software installed and run as a non-privileged user may conduct improper GPU system calls to manipul…
Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel, leading to read/write UAFs. During workload submission involving a fence exported by the GPU driver, the reference count of the underlying synchronisation primitive is not properly incremented. This can be exploited, by destroying the ex…
nvdaltovulnerabilidad CVSS 7.8 NVD
G Alto vulnerabilidad
23/07/2026
[CVE-2026-16804] Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who had c…
Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.3 NVD
G Alto vulnerabilidad
23/07/2026
[CVE-2026-16805] Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execut…
Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Alto vulnerabilidad
23/07/2026
[CVE-2026-16806] Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execu…
Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Crítico vulnerabilidad
21/07/2026
[CVE-2026-16424] Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker …
Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
nvdcriticovulnerabilidad CVSS 9.6 NVD
G Alto vulnerabilidad
21/07/2026
[CVE-2026-16423] Use after free in UI in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who convince…
Use after free in UI in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.8 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-16367] Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability wa…
Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
nvdcriticovulnerabilidad CVSS 10.0 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-16356] Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was…
Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Alto vulnerabilidad
21/07/2026
[CVE-2026-16362] Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 153, Fi…
Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-16351] Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed …
Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-16352] Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was…
Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-16353] Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153…
Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
nvdcriticovulnerabilidad CVSS 9.8 NVD
A Alto vulnerabilidad
21/07/2026
[CVE-2026-60080] Use After Free vulnerability in the Rust deserialization logic of Apache Fory. This issue affects Ap…
Use After Free vulnerability in the Rust deserialization logic of Apache Fory. This issue affects Apache Fory from 0.13.0 through 1.3.0. A crafted Fory payload could cause undefined behavior, process crash, or potential memory disclosure. Users are recommended to upgrade to version 1.4.0, which fixes the issue.
nvdaltovulnerabilidad CVSS 7.3 NVD
G Alto vulnerabilidad
20/07/2026
[CVE-2026-15904] Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.128 allowed a remote attacker …
Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.128 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Alto vulnerabilidad
20/07/2026
[CVE-2026-15905] Use after free in Aura in Google Chrome prior to 150.0.7871.128 allowed a local attacker to potentia…
Use after free in Aura in Google Chrome prior to 150.0.7871.128 allowed a local attacker to potentially exploit heap corruption via a malicious file. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 7.8 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
G Crítico vulnerabilidad
20/07/2026
[CVE-2026-15899] Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a remote att…
Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
nvdcriticovulnerabilidad CVSS 9.6 NVD
G Crítico vulnerabilidad
20/07/2026
[CVE-2026-15900] Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker …
Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
nvdcriticovulnerabilidad CVSS 9.6 NVD
G Crítico vulnerabilidad
20/07/2026
[CVE-2026-15901] Use after free in Network in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to pote…
Use after free in Network in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
nvdcriticovulnerabilidad CVSS 9.6 NVD
G Alto vulnerabilidad
20/07/2026
[CVE-2026-15902] Use after free in Cast in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute…
Use after free in Cast in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.8 NVD
L Alto vulnerabilidad
19/07/2026
[CVE-2026-63804] In the Linux kernel, the following vulnerability has been resolved: gfs2: fix use-after-free in gfs…
In the Linux kernel, the following vulnerability has been resolved: gfs2: fix use-after-free in gfs2_qd_dealloc gfs2_qd_dealloc(), called as an RCU callback from gfs2_qd_dispose(), accesses the superblock object sdp through qd->qd_sbd after freeing qd. It does so to decrement sd_quota_count and wake up sd_kill_wait. However, by the time the RCU callback runs, gfs2_put_super() may have already f…
nvdaltovulnerabilidad CVSS 7.8 NVD