Alertas de Seguridad de la Información

A Alto vulnerabilidad

09/06/2026

[CVE-2026-48293] InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerabil…

InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

nvdaltovulnerabilidad CVSS 7.8 NVD

A Alto vulnerabilidad

09/06/2026

[CVE-2026-34706] InCopy versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that c…

InCopy versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

nvdaltovulnerabilidad CVSS 7.8 NVD

A Alto vulnerabilidad

09/06/2026

[CVE-2026-34700] InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerabil…

InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

nvdaltovulnerabilidad CVSS 7.8 NVD

O Alto vulnerabilidad

09/06/2026

[CVE-2026-7383] Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in AS…

Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefined behaviour. In ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination size for Unicode output is computed in a…

nvdaltovulnerabilidad CVSS 8.1 NVD

F Alto vulnerabilidad

09/06/2026

[CVE-2026-49475] FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary …

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.0, a STUN packet whose declared attribute length is shorter than the structure the parser casts to causes the parser to read and write past the end of the attribute, producing an out-of-bounds me…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-48563] Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo…

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-47653] Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo…

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-47654] Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo…

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-45645] Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code lo…

Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-45472] Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

nvdaltovulnerabilidad CVSS 8.4 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-45474] Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

nvdaltovulnerabilidad CVSS 8.4 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-45461] Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

nvdaltovulnerabilidad CVSS 8.4 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-44801] Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo…

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-42985] Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo…

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-42913] Concurrent execution using shared resource with improper synchronization ('race condition') in Remot…

Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-42909] Concurrent execution using shared resource with improper synchronization ('race condition') in Remot…

Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-42910] Out-of-bounds write in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate …

Out-of-bounds write in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate privileges locally.

nvdaltovulnerabilidad CVSS 7.8 NVD

Z Alto vulnerabilidad

09/06/2026

[CVE-2026-5068] A remote, unauthenticated BLE peer can trigger a 2-byte out-of-bounds write in the Bluetooth host du…

A remote, unauthenticated BLE peer can trigger a 2-byte out-of-bounds write in the Bluetooth host during L2CAP LE CoC SDU reassembly. When the application enables segmentation (via chan_ops.alloc_buf) and the chosen RX pool has a user_data_size smaller than 2 bytes, the segmentation counter stored in the net_buf user_data area is written out of bounds in l2cap_chan_le_recv_seg (subsys/bluetooth/ho…

nvdaltovulnerabilidad CVSS 7.6 NVD

G Alto vulnerabilidad

09/06/2026

[CVE-2026-11690] Out of bounds read and write in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remo…

Out of bounds read and write in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 7.5 NVD

L Alto vulnerabilidad

08/06/2026

[CVE-2026-46294] In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in io…

In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing Tony Asleson (using Claude) found a buffer overflow in dm-ioctl in the function retrieve_status: 1. The code in retrieve_status checks that the output string fits into the output buffer and writes the output string there 2. Then, the code aligns the "outptr" variable to the next …

nvdaltovulnerabilidad CVSS 7.8 NVD