Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada ahora mismo

13,434

Total alertas

3054

Críticas

10108

Altas

8

Ransomware

1778

Esta semana

RSS

Alta × cwe-190 × Limpiar todo ×

M Alto vulnerabilidad

[CVE-2026-53705] A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a special…

A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the buffer size calculation (4 * block_samples * channels) in gst_wavpack_dec_handle_frame() causes a very small heap allocation. The WavPack library then writes decoded audio samples far beyond the allocated buffer, resulting in heap memory corruption…

M Alto vulnerabilidad

[CVE-2026-52722] A signed integer overflow vulnerability was found in GStreamer's VMnc decoder. A crafted VMnc stream…

A signed integer overflow vulnerability was found in GStreamer's VMnc decoder. A crafted VMnc stream with large cursor dimensions can overflow signed integer payload-size arithmetic, bypassing a length check and leading to out-of-bounds reads. A remote attacker could trick a user into opening a specially crafted VMnc file, potentially causing a crash or information disclosure.

M Alto vulnerabilidad

[CVE-2025-14098] Heap buffer out-of-bounds write vulnerability due to integer overflow in Avira Antivirus engine when…

Heap buffer out-of-bounds write vulnerability due to integer overflow in Avira Antivirus engine when scanning a malformed MS-DOS executable file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.104.

M Alto vulnerabilidad

[CVE-2026-11774] An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In s…

An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), adding sizeof(uint32_t) to a crafted SASL packet length prefix of 0xFFFFFFFC causes unsigned wraparound to zero, bypassing the nsslapd-maxsasliosize limit and leading to a heap buffer overflow of up to approximately 2 megabytes of attacker-controlled data. After a successful S…

Q Alto vulnerabilidad

[CVE-2025-66280] An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating s…

An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3410 build 20260214 and later QuTS hero h5.2.9.3410 build 20260214 and …

A Alto vulnerabilidad

[CVE-2026-34711] CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Integer…

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

M Alto vulnerabilidad

[CVE-2023-29146] The utility functions used by Malwarebytes EDR 1.0.11 on Linux for calculating a cryptographic hash …

The utility functions used by Malwarebytes EDR 1.0.11 on Linux for calculating a cryptographic hash of data bytes truncate the hashed data if it exceeds 4GB. This leads to an integer wrap-around if the data is larger than the maximum unsigned integer value (32-bit). Attackers could create a colliding hash value for two different strings by attaching 4GB of data to a string that is less than 4GB in…

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →

M Alto vulnerabilidad

[CVE-2026-47288] Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code ove…

Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent network.

M Alto vulnerabilidad

[CVE-2026-45592] Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to el…

Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileges locally.

M Alto vulnerabilidad

[CVE-2026-45593] Use after free in Windows SDK allows an authorized attacker to elevate privileges locally.

Use after free in Windows SDK allows an authorized attacker to elevate privileges locally.

M Alto vulnerabilidad

[CVE-2026-44812] Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute c…

Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-44803] Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute c…

Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-42974] Integer overflow or wraparound in Windows Performance Monitor allows an unauthorized attacker to exe…

Integer overflow or wraparound in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-42916] Integer overflow or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate priv…

Integer overflow or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.

V Alto vulnerabilidad

[CVE-2026-41849] An integer overflow vulnerability exists in the evaluation logic of the Spring Expression Language (…

An integer overflow vulnerability exists in the evaluation logic of the Spring Expression Language (SpEL). An attacker can exploit this by supplying a specially crafted SpEL expression that triggers excessive resource consumption, resulting in a Denial of Service (DoS). Affected versions: Spring Framework 5.3.0 through 5.3.48.

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →

7 Alto vulnerabilidad

[CVE-2026-48095] 7-Zip is a file archiver with a high compression ratio. Versions 26.00 and prior contain a heap buff…

7-Zip is a file archiver with a high compression ratio. Versions 26.00 and prior contain a heap buffer overflow vulnerability caused by an under-allocation in the NTFS compressed stream buffer (GetCuSize shift UB), potentially allowing attackers to cause arbitrary code execution or application crashes. CInStream::GetCuSize() in the NTFS handler computes the compression-unit buffer size as (UInt32)…

G Alto vulnerabilidad

[CVE-2026-10921] Integer overflow in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had c…

Integer overflow in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Alto vulnerabilidad

[CVE-2026-10924] Integer overflow in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who…

Integer overflow in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-37462] An integer underflow in the BGPUpdate.DecodeFromBytes function (/bgp/bgp.go) of gobgp v4.3.0 allows …

An integer underflow in the BGPUpdate.DecodeFromBytes function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.

O Alto vulnerabilidad

[CVE-2026-45686] OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard…

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.7.0 to before version 0.9.0, a remotely reachable integer overflow in OBI's memcached text protocol parser can crash the OBI process and cause denial of service. When parsing memcached storage commands such as set, add, replace, append, prepend, or cas, OBI accepts extremely large

← Anterior 1 … 5 6 7