Alertas de Seguridad de la Información

F Alto vulnerabilidad

14/07/2026

[CVE-2026-59841] A improper restriction of communication channel to intended endpoints vulnerability in Fortinet Fort…

A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of privilege via

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

14/07/2026

CVE-2026-49167 Windows Kernel Elevation of Privilege Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-49167 Windows Kernel Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).

windowseop Microsoft MSRC

M Alto vulnerabilidad

14/07/2026

CVE-2026-49168 Storage Spaces Direct Elevation of Privilege Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-49168 Storage Spaces Direct Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).

eop Microsoft MSRC

M Alto vulnerabilidad

14/07/2026

CVE-2026-45496 Visual Studio Code Security Feature Bypass Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-45496 Visual Studio Code Security Feature Bypass Vulnerability. Tipo: Bypass de Característica de Seguridad.

visual-studiosfb Microsoft MSRC

M Alto vulnerabilidad

14/07/2026

CVE-2026-55000 Windows USB Print Driver Elevation of Privilege Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-55000 Windows USB Print Driver Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).

windowseop Microsoft MSRC

M Alto vulnerabilidad

14/07/2026

CVE-2026-54132 Windows Kernel Elevation of Privilege Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-54132 Windows Kernel Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).

windowseop Microsoft MSRC

M Alto vulnerabilidad

14/07/2026

CVE-2026-54108 Microsoft SharePoint Server Spoofing Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-54108 Microsoft SharePoint Server Spoofing Vulnerability. Tipo: Suplantación (Spoofing).

sharepointspoofing Microsoft MSRC

R Alto vulnerabilidad

14/07/2026

CVE-2026-57097 Microsoft XML Security Feature Bypass Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-57097 Microsoft XML Security Feature Bypass Vulnerability. Tipo: Bypass de Característica de Seguridad.

sfb Microsoft MSRC

M Alto vulnerabilidad

14/07/2026

CVE-2026-58279 Azure CycleCloud Elevation of Privilege Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-58279 Azure CycleCloud Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).

azureeop Microsoft MSRC

M Alto vulnerabilidad

14/07/2026

CVE-2026-58614 Windows Kernel Security Feature Bypass Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-58614 Windows Kernel Security Feature Bypass Vulnerability. Tipo: Bypass de Característica de Seguridad.

windowssfb Microsoft MSRC

M Alto vulnerabilidad

14/07/2026

[CVE-2026-0487] SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) files from a…

SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) files from an untrusted location, allowing them to execute malicious code on the system. This could enable the attacker to hijack the DLL loading process and achieve arbitrary code execution. This has high impact on confidentiality, integrity and availability of the system.

nvdaltovulnerabilidad CVSS 8.4 NVD

M Alto vulnerabilidad

14/07/2026

[CVE-2026-56155] Vulnerabilidad explotada activamente en Microsoft Active Directory Federation Services

CISA confirma explotación activa de una vulnerabilidad en Microsoft Active Directory Federation Services. No se ha confirmado uso en campañas de ransomware conocidas. Fecha límite para aplicar parche según directiva CISA: 2026-07-28.

explotación activavulnerabilidad CISA KEV

M Alto vulnerabilidad

14/07/2026

[CVE-2026-56164] Vulnerabilidad explotada activamente en Microsoft SharePoint Server

CISA confirma explotación activa de una vulnerabilidad en Microsoft SharePoint Server. No se ha confirmado uso en campañas de ransomware conocidas. Fecha límite para aplicar parche según directiva CISA: 2026-07-17.

explotación activavulnerabilidad CISA KEV

M Alto vulnerabilidad

12/07/2026

[CVE-2026-58596] Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to …

Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

nvdaltovulnerabilidad CVSS 8.3 NVD

M Alto vulnerabilidad

11/07/2026

[CVE-2026-58281] Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker…

Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

nvdaltovulnerabilidad CVSS 8.3 NVD

E Alto vulnerabilidad

10/07/2026

[CVE-2026-59161] Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.1…

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, the streaming worksheet reader used by Rows and GetRows does not enforce the TotalRows limit on the row r attribute, allowing a small XLSX file with a row number above 1048576 and no cell coordinate to make GetRows append empty rows up to the attacker-controlled index and consume excessive memo…

nvdaltovulnerabilidad CVSS 7.5 NVD

E Alto vulnerabilidad

10/07/2026

[CVE-2026-59162] Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.1…

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, Excelize parses shared-string cell values with strconv.Atoi and checks only the upper bound before indexing the shared string slice, allowing an XLSX file containing a shared-string cell with -1 to trigger sharedStrings[-1] and panic when read through GetCellValue or GetRows. This issue is fixe…

nvdaltovulnerabilidad CVSS 7.5 NVD

E Alto vulnerabilidad

10/07/2026

[CVE-2026-54063] Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.1…

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, the checkSheet() function in github.com/xuri/excelize/v2 uses an attacker-controlled XML attribute value directly as the length argument to make([]xlsxRow, row) without validating it against the Excel row limit (TotalRows = 1,048,576). A specially crafted XLSX file can trigger two d…

nvdaltovulnerabilidad CVSS 7.5 NVD

P Alto vulnerabilidad

09/07/2026

[CVE-2026-0278] Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP) compone…

Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP) component for Windows allow a local user to bypass DLP policy enforcement controls. The Prisma Access Agent on macOS is not affected.

nvdaltovulnerabilidad CVSS 7.8 NVD

G Alto vulnerabilidad

08/07/2026

[CVE-2026-15120] Use after free in Core in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker…

Use after free in Core in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.3 NVD