Alertas de Seguridad de la Información

A Alto vulnerabilidad

29/06/2026

[CVE-2026-43705] A type confusion issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS…

A type confusion issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to memory corruption.

nvdaltovulnerabilidad CVSS 8.8 NVD

A Alto vulnerabilidad

18/06/2026

[CVE-2026-12390] In AzeoTech DAQFactory versions 21.1 and prior, a Type Confusion vulnerability can be exploited by a…

In AzeoTech DAQFactory versions 21.1 and prior, a Type Confusion vulnerability can be exploited by an attacker using specially crafted .ctl files which can result in code execution.

nvdaltovulnerabilidad CVSS 7.8 NVD

G Alto vulnerabilidad

16/06/2026

[CVE-2026-0162] In ParsePayloads of AudioSdpParser.cpp, there is a possible memory corruption due to type confusion.…

In ParsePayloads of AudioSdpParser.cpp, there is a possible memory corruption due to type confusion. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-45641] Access of resource using incompatible type ('type confusion') in Windows Hyper-V allows an unauthori…

Access of resource using incompatible type ('type confusion') in Windows Hyper-V allows an unauthorized attacker to execute code locally.

nvdaltovulnerabilidad CVSS 8.4 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-45635] Access of resource using incompatible type ('type confusion') in Universal Plug and Play (upnp.dll) …

Access of resource using incompatible type ('type confusion') in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a network.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-45600] Access of resource using incompatible type ('type confusion') in Windows Kernel-Mode Drivers allows …

Access of resource using incompatible type ('type confusion') in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-45456] Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthor…

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

nvdaltovulnerabilidad CVSS 8.4 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-44817] Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un…

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

nvdaltovulnerabilidad CVSS 7.8 NVD

G Alto vulnerabilidad

09/06/2026

[CVE-2026-11662] Type Confusion in Bindings in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to exe…

Type Confusion in Bindings in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

07/06/2026

[CVE-2026-11463] A vulnerability was determined in USCiLab Cereal up to 1.3.2. Affected is an unknown function of the…

A vulnerability was determined in USCiLab Cereal up to 1.3.2. Affected is an unknown function of the component Shared Pointer Handler. Executing a manipulation can lead to type confusion. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.

nvdaltovulnerabilidad CVSS 7.3 NVD

G Alto vulnerabilidad

04/06/2026

[CVE-2026-11076] Type Confusion in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute a…

Type Confusion in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

04/06/2026

[CVE-2026-10962] Type Confusion in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute…

Type Confusion in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

04/06/2026

[CVE-2026-10955] Type Confusion in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker…

Type Confusion in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

04/06/2026

[CVE-2026-10935] Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute ar…

Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

04/06/2026

[CVE-2026-10936] Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute ar…

Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

04/06/2026

[CVE-2026-10910] Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute ar…

Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.8 NVD

R Alto vulnerabilidad

03/06/2026

[CVE-2026-9334] Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when d…

Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeys_as_arrayref is enabled. decode_hv() collapses duplicate object keys into an array reference under dupkeys_as_arrayref. The branch reached for a duplicate key tests `SvTYPE (old_value) != SVt_RV && SvTYPE (SvRV (old_value)) != SVt_PVAV`, which evaluates SvRV(old_value) before establishing tha…

nvdaltovulnerabilidad CVSS 7.3 NVD