Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
22,093
Total alertas
4671
Críticas
16834
Altas
8
Ransomware
1023
Esta semana
RSS
Alta × windows × Limpiar todo ×
M Alto vulnerabilidad
08/09/2026
CVE-2026-72980 Windows Hello Security Feature Bypass Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-72980 Windows Hello Security Feature Bypass Vulnerability. Tipo: Bypass de Característica de Seguridad.
windowssfb Microsoft MSRC
M Alto vulnerabilidad
08/09/2026
CVE-2026-77892 Windows Boot Manager Elevation of Privilege Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-77892 Windows Boot Manager Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).
windowseop Microsoft MSRC
M Alto vulnerabilidad
08/09/2026
CVE-2026-72947 Windows File History Service Elevation of Privilege Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-72947 Windows File History Service Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).
windowseop Microsoft MSRC
M Alto vulnerabilidad
31/08/2026
CVE-2026-26174 Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-26174 Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).
windowseop Microsoft MSRC
G Alto vulnerabilidad
25/08/2026
[CVE-2026-78915] Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjace…
Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
24/08/2026
CVE-2026-50661 Windows BitLocker Security Feature Bypass Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-50661 Windows BitLocker Security Feature Bypass Vulnerability. Tipo: Bypass de Característica de Seguridad.
windowssfb Microsoft MSRC
M Alto vulnerabilidad
21/08/2026
CVE-2026-58547 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-58547 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).
windowseop Microsoft MSRC

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
14/08/2026
CVE-2026-32153 Windows Speech Runtime Elevation of Privilege Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-32153 Windows Speech Runtime Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).
windowseop Microsoft MSRC
M Alto vulnerabilidad
13/08/2026
CVE-2026-50298 Windows Spaceport.sys Elevation of Privilege Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-50298 Windows Spaceport.sys Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).
windowseop Microsoft MSRC
M Alto vulnerabilidad
11/08/2026
CVE-2026-61936 Windows Defender Firewall Service Security Feature Bypass Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-61936 Windows Defender Firewall Service Security Feature Bypass Vulnerability. Tipo: Bypass de Característica de Seguridad.
windowssfb Microsoft MSRC
M Alto vulnerabilidad
11/08/2026
CVE-2026-70304 Windows DNS Elevation of Privilege Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-70304 Windows DNS Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).
windowseop Microsoft MSRC
M Alto vulnerabilidad
11/08/2026
CVE-2026-70330 Windows DNS Elevation of Privilege Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-70330 Windows DNS Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).
windowseop Microsoft MSRC
M Alto vulnerabilidad
22/07/2026
CVE-2026-50377 Windows Kernel Elevation of Privilege Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-50377 Windows Kernel Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).
windowseop Microsoft MSRC
A Alto vulnerabilidad
20/07/2026
[CVE-2026-56623] Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library…
Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and server-side SSH. A git server implemented with Apache MINA SSHD component sshd-git and running on Windows could allow an authenticated remote user access to git repositories outside of the configured server-side root directory. The path validation applied for CVE-2026-48827 …
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
16/07/2026
CVE-2026-58643 Windows Admin Center Spoofing Vulnerability
Microsoft publica advisory de seguridad: CVE-2026-58643 Windows Admin Center Spoofing Vulnerability. Tipo: Suplantación (Spoofing).
windowsspoofing Microsoft MSRC

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
A Alto vulnerabilidad
15/07/2026
[CVE-2026-40952] CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client…
CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or server can use it to elevate privileges to Administrator when Secure Access is installed in a non-default location.
nvdaltovulnerabilidad CVSS 7.8 NVD
A Alto vulnerabilidad
14/07/2026
[CVE-2026-48337] Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code …
Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvdaltovulnerabilidad CVSS 7.8 NVD
A Alto vulnerabilidad
14/07/2026
[CVE-2026-48335] Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code …
Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvdaltovulnerabilidad CVSS 7.8 NVD
A Alto vulnerabilidad
14/07/2026
[CVE-2026-48336] Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code …
Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvdaltovulnerabilidad CVSS 7.8 NVD
A Alto vulnerabilidad
14/07/2026
[CVE-2026-48275] Illustrator is affected by an Untrusted Search Path vulnerability that could result in arbitrary cod…
Illustrator is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
nvdaltovulnerabilidad CVSS 8.6 NVD