Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
13,599
Total alertas
3086
Críticas
10241
Altas
8
Ransomware
1805
Esta semana
RSS
Alta × cwe-362 × Limpiar todo ×
G Alto vulnerabilidad
17/06/2026
[CVE-2026-12468] Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had co…
Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.3 NVD
G Alto vulnerabilidad
17/06/2026
[CVE-2026-12454] Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who …
Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.3 NVD
G Alto vulnerabilidad
17/06/2026
[CVE-2026-0068] In createSessionInternal of PackageInstallerService.java, there is a possible method to remove a DPC…
In createSessionInternal of PackageInstallerService.java, there is a possible method to remove a DPC app from a managed device without DO consent due to desync from persistence. This could lead to local escalation of privilege if a user can install a malicious app with no additional execution privileges needed. User interaction is needed for exploitation.
nvdaltovulnerabilidad CVSS 7.8 NVD
G Alto vulnerabilidad
17/06/2026
[CVE-2026-0083] In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition. This c…
In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
nvdaltovulnerabilidad CVSS 7.0 NVD
M Alto vulnerabilidad
15/06/2026
[CVE-2026-48708] OliveTin gives access to predefined shell commands from a web interface. In versions 3000.0.0 and pr…
OliveTin gives access to predefined shell commands from a web interface. In versions 3000.0.0 and prior, the template engine uses a single shared text/template.Template instance (tpl package-level variable in service/internal/tpl/templates.go) across all goroutines. Every action execution calls tpl.Parse(source) followed by t.Execute() on this shared instance with no synchronization. When two or m…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
13/06/2026
[CVE-2026-54229] A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. ChownProblemDir …
A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. ChownProblemDir opens the dump directory with DD_OPEN_READONLY and calls dd_chown to change ownership of all files to the caller's uid, succeeding even while post-create event handlers hold a write lock. This allows an attacker to gain filesystem-level control of the dump directory while privileged event scripts ar…
nvdaltovulnerabilidad CVSS 7.0 NVD
G Alto vulnerabilidad
11/06/2026
[CVE-2026-12022] Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who …
Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.3 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
10/06/2026
[CVE-2026-44693] Pi-hole FTL is the core engine of the Pi-hole network-level advertisement and tracker blocker. Prior…
Pi-hole FTL is the core engine of the Pi-hole network-level advertisement and tracker blocker. Prior to version 6.6.1, Pi-hole FTL contains a race condition vulnerability in the HTTP session management subsystem, introduced with the v6.0 rewrite of the embedded CivetWeb-based web server. This issue has been patched in version 6.6.1.
nvdaltovulnerabilidad CVSS 8.8 NVD
A Alto vulnerabilidad
10/06/2026
[CVE-2022-26758] A malicious application may cause unexpected changes in memory shared between processes. A memory co…
A malicious application may cause unexpected changes in memory shared between processes. A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4.
nvdaltovulnerabilidad CVSS 7.1 NVD
G Alto vulnerabilidad
10/06/2026
[CVE-2026-1220] Race in V8 in Google Chrome prior to 144.0.7559.99 allowed a remote attacker to potentially exploit …
Race in V8 in Google Chrome prior to 144.0.7559.99 allowed a remote attacker to potentially exploit type confusion via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
09/06/2026
[CVE-2026-45598] Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.0 NVD
M Alto vulnerabilidad
09/06/2026
[CVE-2026-45601] Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.0 NVD
M Alto vulnerabilidad
09/06/2026
[CVE-2026-45603] Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.0 NVD
M Alto vulnerabilidad
09/06/2026
[CVE-2026-45596] Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele…
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.0 NVD
M Alto vulnerabilidad
09/06/2026
[CVE-2026-45597] Concurrent execution using shared resource with improper synchronization ('race condition') in UI Au…
Concurrent execution using shared resource with improper synchronization ('race condition') in UI Automation Manager (uiamanager.dll) allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.0 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
09/06/2026
[CVE-2026-44818] Concurrent execution using shared resource with improper synchronization ('race condition') in Micro…
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvdaltovulnerabilidad CVSS 7.0 NVD
M Alto vulnerabilidad
09/06/2026
[CVE-2026-42991] Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
09/06/2026
[CVE-2026-42977] Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
09/06/2026
[CVE-2026-42978] Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
09/06/2026
[CVE-2026-42979] Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.8 NVD