Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada ahora mismo

Buscando: "X" — 12547 resultados ✕ Limpiar búsqueda

22,394

Total alertas

4758

Críticas

17006

Altas

8

Ransomware

1258

Esta semana

RSS

Alta × Limpiar todo ×

M Alto vulnerabilidad

[CVE-2026-102827] simple-git, an interface for running git commands in any node.js application, enables applications t…

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior to 4.0.0, the default blockUnsafeOperationsPlugin compares parsed option names with literal dangerous option spellings while Git accepts unambiguous long-option abbreviations. Attacker-influenced push arguments such as abbreviated --receive-pack or --e…

M Alto vulnerabilidad

[CVE-2026-102831] JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jup…

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0 until 4.5.11 and 4.6.4, from Notebook 7.5.0 until 7.6.3, and from JupyterLite Core 0.7.0 until 0.8.4, the system clipboard cell-paste path accepts attacker-controlled cell JSON without clearing metadata.trusted. When useSystemClipboardForCells is act…

M Alto vulnerabilidad

[CVE-2026-102823] Russh is a Rust SSH client and server library. Prior to 0.63.1, client_read_authenticated in russh/s…

Russh is a Rust SSH client and server library. Prior to 0.63.1, client_read_authenticated in russh/src/client/encrypted.rs forwards CHANNEL_DATA, CHANNEL_EXTENDED_DATA, CHANNEL_EOF, CHANNEL_CLOSE, CHANNEL_OPEN_FAILURE, CHANNEL_SUCCESS, CHANNEL_FAILURE, and CHANNEL_REQUEST subtypes exit-status, exit-signal, and xon-xoff to public client::Handler callbacks without confirming that the ChannelId belon…

M Alto vulnerabilidad

[CVE-2026-102826] simple-git, an interface for running git commands in any node.js application, enables applications t…

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior to 4.0.0, the default blockUnsafeOperationsPlugin does not completely reject configuration includes supplied through customArgs to git.clone(). The missing include.path classification permits Git to load an attacker-controlled configuration file, and t…

M Alto vulnerabilidad

[CVE-2026-102616] A vulnerability was detected in risesoft-y9 WorkFlow-Engine up to 9.6.10. Impacted is the function g…

A vulnerability was detected in risesoft-y9 WorkFlow-Engine up to 9.6.10. Impacted is the function getByIdAndYear of the file CustomHistoricProcessServiceImpl.java of the component OAuth2 Resource Filter. Performing a manipulation of the argument year/processInstanceId results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. The sink is in…

M Alto vulnerabilidad

[CVE-2026-95372] Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who h…

Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-95373] Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leverag…

Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →

M Alto vulnerabilidad

[CVE-2026-95380] Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging so…

Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

M Alto vulnerabilidad

[CVE-2026-95381] Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attac…

Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

M Alto vulnerabilidad

[CVE-2026-95365] Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to pot…

Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-95369] Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote attacke…

Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

M Alto vulnerabilidad

[CVE-2026-95351] Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had co…

Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-95353] Use after free in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to exec…

Use after free in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

M Alto vulnerabilidad

[CVE-2026-95354] Use after free in Verifier in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had…

Use after free in Verifier in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)

M Alto vulnerabilidad

[CVE-2026-95355] Incorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a re…

Incorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →

M Alto vulnerabilidad

[CVE-2026-95343] Use after free in WebAudio in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to exec…

Use after free in WebAudio in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-95345] Use after free in Actor in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute…

Use after free in Actor in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

M Alto vulnerabilidad

[CVE-2026-95348] Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who ha…

Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-95335] Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had comp…

Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-95338] Use after free in PDFium in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execut…

Use after free in PDFium in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)

← Anterior 1 … 50 51 52 53 54 … 628 Siguiente →