Alertas de Seguridad de la Información

A Alto vulnerabilidad

14/07/2026

[CVE-2026-48344] Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerabil…

Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.

nvdaltovulnerabilidad CVSS 7.8 NVD

A Alto vulnerabilidad

14/07/2026

[CVE-2026-48272] Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could r…

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.

nvdaltovulnerabilidad CVSS 7.8 NVD

G Alto vulnerabilidad

14/07/2026

[CVE-2026-15767] Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote …

Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted video file. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.8 NVD

F Alto vulnerabilidad

14/07/2026

[CVE-2026-59841] A improper restriction of communication channel to intended endpoints vulnerability in Fortinet Fort…

A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of privilege via

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

14/07/2026

CVE-2026-49167 Windows Kernel Elevation of Privilege Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-49167 Windows Kernel Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).

windowseop Microsoft MSRC

M Alto vulnerabilidad

14/07/2026

CVE-2026-55000 Windows USB Print Driver Elevation of Privilege Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-55000 Windows USB Print Driver Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).

windowseop Microsoft MSRC

M Alto vulnerabilidad

14/07/2026

CVE-2026-54132 Windows Kernel Elevation of Privilege Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-54132 Windows Kernel Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).

windowseop Microsoft MSRC

M Alto vulnerabilidad

14/07/2026

CVE-2026-58614 Windows Kernel Security Feature Bypass Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-58614 Windows Kernel Security Feature Bypass Vulnerability. Tipo: Bypass de Característica de Seguridad.

windowssfb Microsoft MSRC

P Alto vulnerabilidad

09/07/2026

[CVE-2026-0278] Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP) compone…

Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP) component for Windows allow a local user to bypass DLP policy enforcement controls. The Prisma Access Agent on macOS is not affected.

nvdaltovulnerabilidad CVSS 7.8 NVD

G Alto vulnerabilidad

08/07/2026

[CVE-2026-15120] Use after free in Core in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker…

Use after free in Core in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.3 NVD

G Alto vulnerabilidad

08/07/2026

[CVE-2026-15122] Insufficient validation of untrusted input in Codecs in Google Chrome on Windows prior to 150.0.7871…

Insufficient validation of untrusted input in Codecs in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.3 NVD

O Alto vulnerabilidad

08/07/2026

[CVE-2026-22927] Omnissa Workspace ONE® Tunnel for Windows addresses a Local Privilege Escalation Vulnerability.

Omnissa Workspace ONE® Tunnel for Windows addresses a Local Privilege Escalation Vulnerability.

nvdaltovulnerabilidad CVSS 7.8 NVD

G Alto vulnerabilidad

30/06/2026

[CVE-2026-14124] Inappropriate implementation in CredentialProvider in Google Chrome on Windows prior to 150.0.7871.4…

Inappropriate implementation in CredentialProvider in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Low)

nvdaltovulnerabilidad CVSS 7.8 NVD

G Alto vulnerabilidad

30/06/2026

[CVE-2026-14122] Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 15…

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Low)

nvdaltovulnerabilidad CVSS 8.1 NVD

G Alto vulnerabilidad

30/06/2026

[CVE-2026-14094] Use after free in Installer in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attac…

Use after free in Installer in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Low)

nvdaltovulnerabilidad CVSS 7.8 NVD

G Alto vulnerabilidad

30/06/2026

[CVE-2026-14087] Heap buffer overflow in WebNN in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote at…

Heap buffer overflow in WebNN in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

30/06/2026

[CVE-2026-14060] Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 150.0.…

Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Low)

nvdaltovulnerabilidad CVSS 7.8 NVD

G Alto vulnerabilidad

30/06/2026

[CVE-2026-14018] Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacke…

Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Medium)

nvdaltovulnerabilidad CVSS 7.8 NVD

G Alto vulnerabilidad

30/06/2026

[CVE-2026-13925] Inappropriate implementation in Downloads in Google Chrome on Windows prior to 150.0.7871.47 allowed…

Inappropriate implementation in Downloads in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Medium)

nvdaltovulnerabilidad CVSS 7.5 NVD

G Alto vulnerabilidad

30/06/2026

[CVE-2026-13849] Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 150.0.…

Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.6 NVD