Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada hace 53 min
22,181
Total alertas
4701
Críticas
16892
Altas
8
Ransomware
1051
Esta semana
RSS
Alta × cwe-416 × Limpiar todo ×
O Alto vulnerabilidad
08/07/2026
[CVE-2026-60002] ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key…
ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)
nvdaltovulnerabilidad CVSS 7.7 NVD
M Alto vulnerabilidad
07/07/2026
[CVE-2026-42958] The application contains a use-after-free vulnerability that can be exploited to cause memory corrup…
The application contains a use-after-free vulnerability that can be exploited to cause memory corruption while parsing specially crafted files. This could allow an attacker to execute arbitrary code in the context of the current process.
nvdaltovulnerabilidad CVSS 7.8 NVD
L Alto vulnerabilidad
04/07/2026
[CVE-2026-53359] In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use…
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role Commit 0cb2af2ea66ad ("KVM: x86: Fix shadow paging use-after-free due to unexpected GFN") fixed a shadow paging mismatch between stored and computed GFNs; the bug could be triggered by changing a PDE mapping from outside the guest, and then deleting a memslot. Th…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
03/07/2026
[CVE-2026-58294] Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov…
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
03/07/2026
[CVE-2026-58287] Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov…
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 8.3 NVD
M Alto vulnerabilidad
03/07/2026
[CVE-2026-58288] Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov…
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 8.3 NVD
M Alto vulnerabilidad
03/07/2026
[CVE-2026-57992] Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov…
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 7.5 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
03/07/2026
[CVE-2026-58276] Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov…
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
03/07/2026
[CVE-2026-57981] Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov…
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
03/07/2026
[CVE-2026-57984] Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov…
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
03/07/2026
[CVE-2026-57986] Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov…
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 7.5 NVD
H Alto vulnerabilidad
03/07/2026
[CVE-2026-9080] Calling `curl_easy_pause()` within the event-based `CURLMOPT_SOCKETFUNCTION` callback triggers a use…
Calling `curl_easy_pause()` within the event-based `CURLMOPT_SOCKETFUNCTION` callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed.
nvdaltovulnerabilidad CVSS 7.3 NVD
L Alto vulnerabilidad
02/07/2026
[CVE-2026-53357] In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in l2cap_soc…
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() bt_accept_dequeue() unlinks a not-yet-accepted child from the parent accept queue and release_sock()s it before returning, so the returned sk has no caller reference and is unlocked. l2cap_sock_cleanup_listen() walks these children on listening-socket close. …
nvdaltovulnerabilidad CVSS 8.0 NVD
G Alto vulnerabilidad
01/07/2026
[CVE-2026-14426] Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who convinced…
Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 7.5 NVD
G Alto vulnerabilidad
01/07/2026
[CVE-2026-14432] Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute ar…
Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvdaltovulnerabilidad CVSS 8.8 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
G Alto vulnerabilidad
01/07/2026
[CVE-2026-14403] Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute ar…
Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Alto vulnerabilidad
01/07/2026
[CVE-2026-14393] Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute ar…
Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Alto vulnerabilidad
01/07/2026
[CVE-2026-14394] Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentiall…
Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
01/07/2026
[CVE-2026-50521] Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over…
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
nvdaltovulnerabilidad CVSS 8.3 NVD
L Alto vulnerabilidad
01/07/2026
[CVE-2026-53341] In the Linux kernel, the following vulnerability has been resolved: fhandle: fix UAF due to unlocke…
In the Linux kernel, the following vulnerability has been resolved: fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() may_decode_fh() accesses mount::mnt_ns without holding any locks; that means the mount can concurrently be unmounted, and the mnt_namespace can concurrently be freed after an RCU grace period. This race can happens as follows, assuming that the mount point was cr…
nvdaltovulnerabilidad CVSS 7.8 NVD