Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers Password Generator VPN PSK Generator
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV Vigía LATAM
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI Noticias ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
24,831
Total alertas
5047
Críticas
19009
Altas
8
Ransomware
2840
Esta semana
RSS
M Alto vulnerabilidad
08/09/2026
[CVE-2026-78464] Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorize…
Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
M Alto vulnerabilidad
08/09/2026
[CVE-2026-78450] Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to ex…
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
M Alto vulnerabilidad
08/09/2026
[CVE-2026-78442] Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a …
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.
M Alto vulnerabilidad
08/09/2026
[CVE-2026-78444] Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute…
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
M Alto vulnerabilidad
08/09/2026
[CVE-2026-78447] Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri…
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
M Alto vulnerabilidad
08/09/2026
[CVE-2026-78448] Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri…
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
M Alto vulnerabilidad
08/09/2026
[CVE-2026-78449] Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to ex…
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
08/09/2026
[CVE-2026-77908] Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an author…
Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.
M Alto vulnerabilidad
08/09/2026
[CVE-2026-77909] Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose i…
Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network.
M Alto vulnerabilidad
08/09/2026
[CVE-2026-78439] Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execu…
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
M Alto vulnerabilidad
08/09/2026
[CVE-2026-77899] Use after free in Windows Security Center allows an authorized attacker to elevate privileges locall…
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.
M Alto vulnerabilidad
08/09/2026
[CVE-2026-77901] Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code ov…
Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
M Alto vulnerabilidad
08/09/2026
[CVE-2026-77904] Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker …
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
M Alto vulnerabilidad
08/09/2026
[CVE-2026-77905] Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privil…
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
M Alto vulnerabilidad
08/09/2026
[CVE-2026-77906] Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a n…
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
08/09/2026
[CVE-2026-77907] Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a n…
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
M Alto vulnerabilidad
08/09/2026
[CVE-2026-77893] Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a net…
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
M Alto vulnerabilidad
08/09/2026
[CVE-2026-77894] Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
M Alto vulnerabilidad
08/09/2026
[CVE-2026-77895] Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a net…
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
M Alto vulnerabilidad
08/09/2026
[CVE-2026-77897] Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locall…
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.