Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada ahora mismo

22,113

Total alertas

4677

Críticas

16848

Altas

8

Ransomware

1019

Esta semana

RSS

Alta × cwe-122 × Limpiar todo ×

M Alto vulnerabilidad

[CVE-2026-14888] IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,…

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow.

M Alto vulnerabilidad

Desbordamiento de búfer en rutina Blowfish de hMailServer 6.0.0-6.3.3 (CVE-2026-103010)

Vulnerabilidad alta en Progressive Robot hMailServer permite a usuarios locales sin credenciales ejecutar desbordamiento de búfer en memoria heap mediante la rutina DecryptFromString, afectando servidores de correo en Windows. El proceso del servicio ejecuta con privilegios LocalSystem, permitiendo escritura de bytes arbitrarios con potencial acceso a datos sensibles y ejecución de código. Impacta infraestructuras de correo empresarial en México y LATAM que mantienen versiones 6.0.0 a 6.3.3.

M Alto vulnerabilidad

[CVE-2026-107161] A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DI…

A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting (escaping special characters) makes the value longer. The under-sized buffer is then passed to strcat(), causing a heap-based out-…

M Alto vulnerabilidad

[CVE-2026-46570] In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/in…

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file metadata.

M Alto vulnerabilidad

[CVE-2026-46572] In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_cut_tail() in libntfs-3g/index.…

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_cut_tail() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a specially crafted directory.

M Alto vulnerabilidad

[CVE-2026-42618] In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_decompress() in compress.c that al…

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_decompress() in compress.c that allows an attacker to corrupt one byte of heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file.

M Alto vulnerabilidad

[CVE-2026-42617] In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ir_to_ib() in index.c that allows …

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ir_to_ib() in index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file.

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →

M Alto vulnerabilidad

[CVE-2026-106292] Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had c…

Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

M Alto vulnerabilidad

[CVE-2026-106247] Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had c…

Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

M Alto vulnerabilidad

[CVE-2026-58835] In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflo…

In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

M Alto vulnerabilidad

[CVE-2026-14316] The revoked-key error path builds a human-readable failure reason using sprintf() into a heap buffer…

The revoked-key error path builds a human-readable failure reason using sprintf() into a heap buffer. The allocated buffer is too small for the final formatted message. When sprintf() writes the full message, it can write past the end of the heap allocation.

M Alto vulnerabilidad

Vulnerabilidad alta en RPM: desbordamiento de búfer por paquete RPM malformado

Se detectó un desbordamiento de búfer en la pila de RPM que permite a atacantes ejecutar código arbitrario mediante paquetes RPM sin firmar con etiqueta RPMTAG_FILESIGNATURES malformada. La vulnerabilidad es accesible a través de herramientas comunes como rpm2cpio, rpm2archive y rpm -qlvp, afectando sistemas Linux en infraestructuras altas de LATAM (servidores, contenedores, pipelines CI/CD). Con CVSS 7.1, representa riesgo alto para empresas que gestionan repositorios RPM o usan distribuciones basadas en Red Hat/CentOS.

M Alto vulnerabilidad

[CVE-2026-92368] TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer …

TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user to open a specially crafted session recording through the "Play or convert recorded session…" feature,…

M Alto vulnerabilidad

[CVE-2026-95389] Caída del disector SCTP permite denegación de servicio en versiones 4.4.0-4.4.18 y 4.6.0-4.6.8

Una vulnerabilidad en el disector del protocolo SCTP permite que un atacante remoto provoque un bloqueo de servicio mediante paquetes especialmente crafteados. Afecta infraestructuras de telecomunicaciones, proveedores de VoIP y sistemas de comunicaciones altas en LATAM. Con CVSS 8.1, el riesgo es significativo para operadores de red y centros de datos.

M Alto vulnerabilidad

Falla alta en disector SPDY permite denegación de servicio (CVE-2026-95387)

Una vulnerabilidad en el disector del protocolo SPDY afecta versiones 4.6.0 a 4.6.8 y 4.4.0 a 4.4.18, permitiendo ataques de denegación de servicio (DoS) con puntuación CVSS 8.1. El exploit puede derribar servicios de análisis de tráfico y monitoreo de red altas en infraestructuras empresariales de LATAM que utilicen estas versiones. La explotación remota sin autenticación representa riesgo significativo para disponibilidad operacional.

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →

M Alto vulnerabilidad

[CVE-2026-75649] Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code…

Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

M Alto vulnerabilidad

[CVE-2026-75665] Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code…

Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

M Alto vulnerabilidad

[CVE-2026-94424] A vulnerability has been found in Moore Threads MTT S80 Driver Package up to 340.150. Impacted is th…

A vulnerability has been found in Moore Threads MTT S80 Driver Package up to 340.150. Impacted is the function sub_140001000 in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The vendor was contacted early about this disclosure but did not respond in any way.

M Alto vulnerabilidad

[CVE-2026-88806] A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbG…

A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map.

M Alto vulnerabilidad

[CVE-2026-93962] A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element …

A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element is the function shm_malloc of the file src/modules/cdp/receiver.c of the component CDP Diameter Receiver. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. Up…

1 2 3 … 35 Siguiente →