Alertas de Seguridad de la Información

M Alto vulnerabilidad

07/08/2026

Vulnerabilidad de elevación de privilegios en StableBit DrivePool 2.3.13.1687

Se detectó una vulnerabilidad (CVE-2026-19191, CVSS 7.8) en el servicio DrivePoolService de StableBit DrivePool 2.3.13.1687 que permite manipulación local del código y escalada de permisos. La vulnerabilidad afecta a empresas en México y LATAM que utilizan soluciones de almacenamiento en pool para servidores NAS y entornos de virtualización. El exploit ha sido divulgado públicamente, elevando el riesgo de explotación inmediata en ambientes sin parches.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

07/08/2026

Vulnerabilidad de control de acceso en DeepCool DisplayService 1.2.12 (CVE-2026-19192)

Se detectó una vulnerabilidad de control de acceso impropio en DeepCool DisplayService 1.2.12 que afecta el archivo DeepCoolDisplayService.exe. El exploit es público y requiere acceso local para ser explotado, comprometiendo sistemas con hardware gaming y de refrigeración líquida comunes en centros de datos y estaciones de trabajo en México y LATAM. Con CVSS 7.8, representa riesgo alto para infraestructuras que ejecuten este servicio.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

07/08/2026

Vulnerabilidad alta en Jiangmin Antivirus 21 permite escalada de privilegios local

Se ha identificado una falla en la función MessageNotifyCallback del componente Minifilter Port (kvcore.sys) de Jiangmin Antivirus 21 que permite eludir controles de acceso mediante ejecución local. El exploit está públicamente disponible y activo en la naturaleza. El fabricante no ha respondido a notificaciones tempranas de divulgación, dejando a usuarios en LATAM sin parches oficiales confirmados.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

07/08/2026

Vulnerabilidad alta en V-Secure Jingyun Antivirus 2.4.2.39 permite escalada de privilegios

Se ha identificado una vulnerabilidad de control de acceso impropio en el controlador de kernel ZyArk.sys de V-Secure Jingyun Antivirus versión 2.4.2.39 (CVSS 7.8). Esta falla requiere acceso local pero permite que un atacante escale privilegios en sistemas Windows. El exploit está públicamente disponible y el fabricante no ha respondido a la divulgación responsable, lo que aumenta el riesgo inmediato para empresas en México y LATAM que usan este antivirus.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

07/08/2026

Vulnerabilidad de escalada de privilegios en StableBit Scanner 2.6.13.4088

Se identificó una debilidad en el servicio ScannerService de StableBit Scanner versión 2.6.13.4088 que permite manipulación de permisos mediante ejecución local en sistemas Windows. El exploit público incrementa el riesgo para empresas en LATAM que utilizan este software de monitoreo de almacenamiento. La vulnerabilidad afecta principalmente servidores y estaciones de trabajo con acceso local no restringido.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

07/08/2026

[CVE-2026-49746] Software installed and run as a non-privileged user may conduct improper GPU system calls to cause O…

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary pages. Incorrect validation of array index can lead to OOB read and potentially to GPU UAF of arbitrary pages.

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

07/08/2026

[CVE-2026-45198] Kernel software from a non-secure operating system on a platform with Trusted Execution Environment …

Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control (Firmware) uses a pointer from non-secure memory belonging to the Rich Execution Environment (REE) when saving or retrieving internal data between the tightly coupled private memory to main mem…

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

07/08/2026

Vulnerabilidad de escalada de privilegios en PowerISO 9.3.0.0 (CVE-2026-19189)

Se ha descubierto una flaw de seguridad en PowerISO versión 9.3.0.0 que afecta el controlador de kernel scdemu.sys, permitiendo escalada impropia de privilegios. El exploit está público y requiere acceso local a la máquina. Empresas en LATAM que usen esta herramienta para virtualización o gestión de imágenes ISO deben evaluar el riesgo inmediato en estaciones de trabajo y servidores, especialmente en entornos donde usuarios estándar comparten equipos.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

07/08/2026

[CVE-2026-65668] Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate pri…

Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

07/08/2026

[CVE-2026-62918] Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker …

Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

07/08/2026

[CVE-2026-62836] Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance al…

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.

nvdaltovulnerabilidad CVSS 8.7 NVD

M Alto vulnerabilidad

07/08/2026

[CVE-2026-49163] Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insigh…

Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows an authorized attacker to elevate privileges over a network.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

06/08/2026

[CVE-2026-7867] A flaw was found in udisks2. A local attacker with an active console session can exploit insufficien…

A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. This allows the attacker to spoof the 'as-user' parameter, mounting filesystems on behalf of arbitrary users, including privileged accounts. This can lead to local privilege escalation th…

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

06/08/2026

[CVE-2026-8325] A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write…

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

06/08/2026

[CVE-2026-7406] A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted…

A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

06/08/2026

[CVE-2026-71488] league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 0.6.0 until 2…

league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 0.6.0 until 2.9.0, specially crafted Markdown lines can cause the parser to have quadratic time complexity when converting, because several parsing paths repeatedly rescan growing portions of a line to translate between character positions and byte positions, and the Autolink extension can also copy and validate…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

06/08/2026

[CVE-2026-70635] TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability th…

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows authenticated attackers to cause query-result integrity failures or backend crashes by supplying a crafted Simple8b selector-11 value, which is stored in the signed int16 Arrow dictionary-index type and bypasses index validation checks in bulk text dictionary decompression. Attackers with …

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

06/08/2026

[CVE-2026-70636] Flowise through 3.1.4 contains an authentication bypass vulnerability that allows unauthenticated at…

Flowise through 3.1.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to access the OAuth2 credential refresh endpoint by exploiting prefix-based whitelist matching in the authentication middleware defined in packages/server/src/utils/constants.ts. Attackers can send a POST request to the oauth2-credential refresh route with a trailing credential identifier to…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

06/08/2026

[CVE-2026-70638] llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android …

llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where the new_1batch() function multiplies sizeof(llama_seq_id) by an attacker-controlled n_seq_max parameter without overflow validation, causing heap buffer allocation to wrap and allocate insufficient memory. Attackers can exploit this by providing a crafted n_seq_max value through a …

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

06/08/2026

[CVE-2026-70640] llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LL…

llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench_1model() and free_1context() lack synchronization, allowing Thread A to operate on freed memory while Thread B concurrently frees the llama_context. Attackers can exploit this by performing heap spray with attacker-controlled data containing a fake vtable to hijac…

nvdaltovulnerabilidad CVSS 7.0 NVD