Alertas de Seguridad de la Información

M Alto vulnerabilidad

14/07/2026

[CVE-2026-47473] NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condit…

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure.

nvdaltovulnerabilidad CVSS 7.4 NVD

A Alto vulnerabilidad

14/07/2026

[CVE-2026-47971] Media Encoder is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitr…

Media Encoder is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

14/07/2026

[CVE-2026-24229] NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, …

NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, where an attacker could read, write, or delete internal cluster state by sending requests to the FastAPI server. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

14/07/2026

[CVE-2026-24233] NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model we…

NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization, where a local, unauthenticated attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

nvdaltovulnerabilidad CVSS 8.4 NVD

N Alto vulnerabilidad

14/07/2026

[CVE-2026-24238] NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation of…

NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation of array index. A successful exploit of this vulnerability might lead to code execution.

nvdaltovulnerabilidad CVSS 7.8 NVD

N Alto vulnerabilidad

14/07/2026

[CVE-2026-24268] NVIDIA TensorRT contains a vulnerability where an attacker might cause a heap-based buffer overflow.…

NVIDIA TensorRT contains a vulnerability where an attacker might cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to code execution.

nvdaltovulnerabilidad CVSS 7.8 NVD

N Alto vulnerabilidad

14/07/2026

[CVE-2026-24272] NVIDIA TensorRT contains a vulnerability where an attacker might cause an overflow to a heap-based b…

NVIDIA TensorRT contains a vulnerability where an attacker might cause an overflow to a heap-based buffer. A successful exploit of this vulnerability might lead to code execution.

nvdaltovulnerabilidad CVSS 7.8 NVD

G Alto vulnerabilidad

14/07/2026

[CVE-2026-15774] Use after free in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had co…

Use after free in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.3 NVD

G Alto vulnerabilidad

14/07/2026

[CVE-2026-15776] Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacke…

Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

14/07/2026

[CVE-2026-15777] Use after free in UI in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who…

Use after free in UI in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 7.5 NVD

G Alto vulnerabilidad

14/07/2026

[CVE-2026-15767] Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote …

Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted video file. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

14/07/2026

[CVE-2026-15769] Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior …

Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.3 NVD

G Alto vulnerabilidad

14/07/2026

[CVE-2026-15772] Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 allowed a remote attacker …

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.3 NVD

M Alto vulnerabilidad

14/07/2026

[CVE-2026-15643] AWS HealthLake MCP Server (awslabs.healthlake-mcp-server) is a Model Context Protocol server that en…

AWS HealthLake MCP Server (awslabs.healthlake-mcp-server) is a Model Context Protocol server that enables AI assistants to interact with AWS HealthLake FHIR datastores. A server-side request forgery in the pagination handling component in AWS awslabs.healthlake-mcp-server before 0.0.14 on all platforms might allow a remote authenticated user to exfiltrate AWS temporary security credentials to an a…

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

14/07/2026

[CVE-2026-15738] Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load Balancer Con…

Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load Balancer Controller before 3.4.2 might allow an authenticated remote user to intercept, spoof, or deny another namespace's gRPC traffic on a shared Gateway via a crafted HTTPRoute resource. To mitigate this issue, users should upgrade to version 3.4.2.

nvdaltovulnerabilidad CVSS 8.5 NVD

G Alto vulnerabilidad

14/07/2026

[CVE-2026-15764] Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker …

Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

nvdaltovulnerabilidad CVSS 7.5 NVD

G Alto vulnerabilidad

14/07/2026

[CVE-2026-15765] Use after free in Ozone in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who convi…

Use after free in Ozone in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

14/07/2026

[CVE-2026-50649] Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

14/07/2026

[CVE-2026-50650] Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized a…

Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

14/07/2026

[CVE-2026-50651] Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny…

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

nvdaltovulnerabilidad CVSS 7.5 NVD