Alertas de Seguridad de la Información

G Alto vulnerabilidad

17/06/2026

[CVE-2026-12445] Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed an attacker who convin…

Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 7.5 NVD

G Alto vulnerabilidad

17/06/2026

[CVE-2026-12437] Use after free in WebShare in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote atta…

Use after free in WebShare in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

nvdaltovulnerabilidad CVSS 8.3 NVD

G Alto vulnerabilidad

16/06/2026

[CVE-2026-0143] In lwis_device_external_event_emit of lwis_event.c, there is a possible memory corruption due to a u…

In lwis_device_external_event_emit of lwis_event.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

nvdaltovulnerabilidad CVSS 7.8 NVD

G Alto vulnerabilidad

16/06/2026

[CVE-2026-0137] In edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation of privile…

In edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation of privilege due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

nvdaltovulnerabilidad CVSS 7.8 NVD

G Alto vulnerabilidad

16/06/2026

[CVE-2026-0125] In multiple functions of vpu_ioctl.c, there is a possible use after free due to a race condition. Th…

In multiple functions of vpu_ioctl.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

nvdaltovulnerabilidad CVSS 7.0 NVD

M Alto vulnerabilidad

16/06/2026

[CVE-2026-12314] Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140…

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

16/06/2026

[CVE-2026-12310] Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140…

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

16/06/2026

[CVE-2026-12291] Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firef…

Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

15/06/2026

[CVE-2026-6040] A heap use-after-free existed when importing the blank-width characters of an ODF number format. A p…

A heap use-after-free existed when importing the blank-width characters of an ODF number format. A position value read from the document was not checked against the length of the format-code string, so a malformed number format could be processed against memory outside that string. In fixed versions the position is bounds-checked before use.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

12/06/2026

[CVE-2026-41158] Software installed and run as a non-privileged user may conduct GPU system calls to write to arbitra…

Software installed and run as a non-privileged user may conduct GPU system calls to write to arbitrary freed physical pages. Physical memory allocated and freed, without the deferred free mechanism can lead to those resources being used for read/write by the GPU after the kernel module has freed the resource.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

12/06/2026

[CVE-2026-11933] A use-after-free vulnerability exists in MongoDB Server's server-side JavaScript engine when convert…

A use-after-free vulnerability exists in MongoDB Server's server-side JavaScript engine when converting BSON documents to JavaScript arrays. An authenticated user with read privileges who is able to run server-side JavaScript (for example, via $where or $function) can cause the server to access memory that has already been freed. This may result in disclosure of information from the mongod process…

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12035] Use after free in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacke…

Use after free in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12028] Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker …

Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.3 NVD

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12029] Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacke…

Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.3 NVD

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12020] Use after free in Autofill in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker…

Use after free in Autofill in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12023] Use after free in GPU in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who …

Use after free in GPU in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.3 NVD

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12008] Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attac…

Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

nvdaltovulnerabilidad CVSS 8.3 NVD

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12011] Use after free in WebMIDI in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attac…

Use after free in WebMIDI in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

nvdaltovulnerabilidad CVSS 8.3 NVD

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12012] Use after free in Network in Google Chrome prior to 149.0.7827.115 allowed an attacker in a privileg…

Use after free in Network in Google Chrome prior to 149.0.7827.115 allowed an attacker in a privileged network position to potentially exploit heap corruption via malicious network traffic. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.1 NVD

G Alto vulnerabilidad

11/06/2026

[CVE-2026-12014] Use after free in Cast in Google Chrome prior to 149.0.7827.115 allowed an attacker on the local net…

Use after free in Cast in Google Chrome prior to 149.0.7827.115 allowed an attacker on the local network segment to potentially perform a sandbox escape via malicious network traffic. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.3 NVD