Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada hace 1 hora

22,093

Total alertas

4671

Críticas

16834

Altas

8

Ransomware

1003

Esta semana

RSS

Alta × cwe-787 × Limpiar todo ×

O Alto vulnerabilidad

[CVE-2026-7383] Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in AS…

Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefined behaviour. In ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination size for Unicode output is computed in a…

F Alto vulnerabilidad

[CVE-2026-49475] FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary …

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.0, a STUN packet whose declared attribute length is shorter than the structure the parser casts to causes the parser to read and write past the end of the attribute, producing an out-of-bounds me…

M Alto vulnerabilidad

[CVE-2026-48563] Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo…

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-47653] Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo…

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-47654] Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo…

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-45645] Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code lo…

Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-45472] Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →

M Alto vulnerabilidad

[CVE-2026-45474] Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-45461] Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-44801] Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo…

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-42985] Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo…

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-42913] Concurrent execution using shared resource with improper synchronization ('race condition') in Remot…

Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-42909] Concurrent execution using shared resource with improper synchronization ('race condition') in Remot…

Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-42910] Out-of-bounds write in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate …

Out-of-bounds write in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate privileges locally.

Z Alto vulnerabilidad

[CVE-2026-5068] A remote, unauthenticated BLE peer can trigger a 2-byte out-of-bounds write in the Bluetooth host du…

A remote, unauthenticated BLE peer can trigger a 2-byte out-of-bounds write in the Bluetooth host during L2CAP LE CoC SDU reassembly. When the application enables segmentation (via chan_ops.alloc_buf) and the chosen RX pool has a user_data_size smaller than 2 bytes, the segmentation counter stored in the net_buf user_data area is written out of bounds in l2cap_chan_le_recv_seg (subsys/bluetooth/ho…

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →

G Alto vulnerabilidad

[CVE-2026-11690] Out of bounds read and write in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remo…

Out of bounds read and write in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

L Alto vulnerabilidad

[CVE-2026-46294] In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in io…

In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing Tony Asleson (using Claude) found a buffer overflow in dm-ioctl in the function retrieve_status: 1. The code in retrieve_status checks that the output string fits into the output buffer and writes the output string there 2. Then, the code aligns the "outptr" variable to the next …

L Alto vulnerabilidad

[CVE-2026-46281] In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix buffer overflow in…

In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix buffer overflow in vrealloc_node_align() Commit 4c5d3365882d ("mm/vmalloc: allow to set node and align in vrealloc") added the ability to force a new allocation if the current pointer is on the wrong NUMA node, or if an alignment constraint is not met, even if the user is shrinking the allocation. On this path (nee…

7 Alto vulnerabilidad

[CVE-2026-48095] 7-Zip is a file archiver with a high compression ratio. Versions 26.00 and prior contain a heap buff…

7-Zip is a file archiver with a high compression ratio. Versions 26.00 and prior contain a heap buffer overflow vulnerability caused by an under-allocation in the NTFS compressed stream buffer (GetCuSize shift UB), potentially allowing attackers to cause arbitrary code execution or application crashes. CInStream::GetCuSize() in the NTFS handler computes the compression-unit buffer size as (UInt32)…

X Alto vulnerabilidad

[CVE-2026-50264] An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuff…

An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple DRI2BufferBackLeft attachments and one DRI2BufferFrontLeft can trigger an out-of-bounds heap write. This may be used to crash the server, or for privilege escalation if the X server runs as root.

← Anterior 1 … 22 23 24 25 Siguiente →