Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada ahora mismo

13,434

Total alertas

3054

Críticas

10108

Altas

8

Ransomware

1741

Esta semana

RSS

Alta × microsoft × Limpiar todo ×

M Alto vulnerabilidad

[CVE-2026-45490] Improper authorization in .NET allows an authorized attacker to elevate privileges locally.

Improper authorization in .NET allows an authorized attacker to elevate privileges locally.

M Alto vulnerabilidad

[CVE-2026-45487] Time-of-check time-of-use (TOCTOU) race condition in Program Compatibility Assistant Service allows …

Time-of-check time-of-use (TOCTOU) race condition in Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

M Alto vulnerabilidad

[CVE-2026-45486] Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-45475] Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local…

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-45476] Use after free in Linux MANA Driver allows an authorized attacker to elevate privileges locally.

Use after free in Linux MANA Driver allows an authorized attacker to elevate privileges locally.

M Alto vulnerabilidad

[CVE-2026-45481] Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of…

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

M Alto vulnerabilidad

[CVE-2026-45482] Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and…

Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →

M Alto vulnerabilidad

[CVE-2026-45484] Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to el…

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

M Alto vulnerabilidad

[CVE-2026-45469] Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to …

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-45471] Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute co…

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-45472] Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-45474] Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-45458] Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-45461] Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-45463] Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execut…

Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →

M Alto vulnerabilidad

[CVE-2026-45456] Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthor…

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-45457] Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-44818] Concurrent execution using shared resource with improper synchronization ('race condition') in Micro…

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-44819] Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local…

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-44820] Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally…

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

← Anterior 1 … 26 27 28 29 30 … 34 Siguiente →