Alertas de Seguridad de la Información

G Alto vulnerabilidad

16/06/2026

[CVE-2026-0153] In Write of msg_to_host_buffer.cc, there is a possible out of bounds write due to an incorrect bound…

In Write of msg_to_host_buffer.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

nvdaltovulnerabilidad CVSS 7.8 NVD

G Alto vulnerabilidad

16/06/2026

[CVE-2026-0132] In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to …

In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

16/06/2026

[CVE-2026-0133] In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootc…

In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

nvdaltovulnerabilidad CVSS 7.8 NVD

G Alto vulnerabilidad

16/06/2026

[CVE-2026-0135] In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to r…

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

nvdaltovulnerabilidad CVSS 7.8 NVD

G Alto vulnerabilidad

16/06/2026

[CVE-2026-0137] In edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation of privile…

In edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation of privilege due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

nvdaltovulnerabilidad CVSS 7.8 NVD

G Alto vulnerabilidad

16/06/2026

[CVE-2026-0138] In lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due to memory c…

In lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

nvdaltovulnerabilidad CVSS 7.8 NVD

G Alto vulnerabilidad

16/06/2026

[CVE-2026-0139] In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to …

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

16/06/2026

[CVE-2026-0125] In multiple functions of vpu_ioctl.c, there is a possible use after free due to a race condition. Th…

In multiple functions of vpu_ioctl.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

nvdaltovulnerabilidad CVSS 7.0 NVD

G Alto vulnerabilidad

16/06/2026

[CVE-2026-0131] In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow. Thi…

In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

12/06/2026

[CVE-2026-53608] ApostropheCMS is an open-source Node.js content management system. Versions up to and including 1.4.…

ApostropheCMS is an open-source Node.js content management system. Versions up to and including 1.4.2 of the `@apostrophecms/seo` package injects the Google Analytics Tracking ID (`seoGoogleTrackingId`) and Google Tag Manager ID (`seoGoogleTagManager`) directly into `` tag bodies using JavaScript template literals without any sanitization or validation. Any user with editor-level access (t…

nvdaltovulnerabilidad CVSS 8.7 NVD

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12035] Use after free in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacke…

Use after free in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12028] Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker …

Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.3 NVD

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12029] Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacke…

Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.3 NVD

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12030] Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote atta…

Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.3 NVD

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12031] Inappropriate implementation in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a …

Inappropriate implementation in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.3 NVD

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12034] Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior …

Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.3 NVD

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12016] Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote a…

Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.3 NVD

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12018] Inappropriate implementation in Mojo in Google Chrome on Windows prior to 149.0.7827.115 allowed a l…

Inappropriate implementation in Mojo in Google Chrome on Windows prior to 149.0.7827.115 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12019] Heap buffer overflow in Codecs in Google Chrome on Linux and ChromeOS prior to 149.0.7827.115 allowe…

Heap buffer overflow in Codecs in Google Chrome on Linux and ChromeOS prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.3 NVD

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12020] Use after free in Autofill in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker…

Use after free in Autofill in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.8 NVD