Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada hace 35 min
Buscando: "Microsoft" — 952 resultados ✕ Limpiar búsqueda
13,539
Total alertas
3075
Críticas
10192
Altas
8
Ransomware
1758
Esta semana
RSS
Alta × Limpiar todo ×
F Alto vulnerabilidad
08/07/2026
[CVE-2026-13126] The embedded JavaScript in the PDF deleted the pages, making the object invalid. The application att…
The embedded JavaScript in the PDF deleted the pages, making the object invalid. The application attempted to perform a write operation on the invalid pop-up annotations, resulting in the program crashing.
nvdaltovulnerabilidad CVSS 7.8 NVD
F Alto vulnerabilidad
08/07/2026
[CVE-2026-13127] The application opens the PDF file. JavaScript then rewrites the document to modify the page structu…
The application opens the PDF file. JavaScript then rewrites the document to modify the page structure, resulting in the invalidation of the page objects. However, the thumbnails still use the invalid page objects, ultimately causing the application to crash.
nvdaltovulnerabilidad CVSS 7.8 NVD
F Alto vulnerabilidad
08/07/2026
[CVE-2026-13128] Embedding JavaScript within a PDF file will cause the page to be deleted. Subsequent scripts will co…
Embedding JavaScript within a PDF file will cause the page to be deleted. Subsequent scripts will continue to access the relevant properties of the document view, eventually leading to the crash of the application.
nvdaltovulnerabilidad CVSS 7.8 NVD
F Alto vulnerabilidad
08/07/2026
[CVE-2026-13129] When the application opens a PDF file, JavaScript uses the damaged field tree to trigger field trave…
When the application opens a PDF file, JavaScript uses the damaged field tree to trigger field traversal, resulting in the program holding an invalid form object when accessing the field property path. Eventually, the application crashes due to reading an invalid pointer.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
03/07/2026
[CVE-2026-58292] Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to exec…
Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
03/07/2026
[CVE-2026-58293] External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized atta…
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 8.1 NVD
M Alto vulnerabilidad
03/07/2026
[CVE-2026-58294] Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov…
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 7.5 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
03/07/2026
[CVE-2026-58295] Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) all…
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
nvdaltovulnerabilidad CVSS 8.3 NVD
M Alto vulnerabilidad
03/07/2026
[CVE-2026-58296] Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allo…
Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
03/07/2026
[CVE-2026-58297] Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allo…
Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
03/07/2026
[CVE-2026-58298] Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ed…
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvdaltovulnerabilidad CVSS 7.2 NVD
M Alto vulnerabilidad
03/07/2026
[CVE-2026-58299] Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthoriz…
Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
03/07/2026
[CVE-2026-58284] Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute…
Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 8.3 NVD
M Alto vulnerabilidad
03/07/2026
[CVE-2026-58285] Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) all…
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 8.3 NVD
M Alto vulnerabilidad
03/07/2026
[CVE-2026-58286] Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perfor…
Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvdaltovulnerabilidad CVSS 8.1 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
03/07/2026
[CVE-2026-58287] Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov…
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 8.3 NVD
M Alto vulnerabilidad
03/07/2026
[CVE-2026-58288] Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov…
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 8.3 NVD
M Alto vulnerabilidad
03/07/2026
[CVE-2026-58290] Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) all…
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
03/07/2026
[CVE-2026-57988] Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execut…
Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
03/07/2026
[CVE-2026-57991] Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) al…
Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
nvdaltovulnerabilidad CVSS 7.4 NVD