Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada ahora mismo

13,599

Total alertas

3086

Críticas

10241

Altas

8

Ransomware

1807

Esta semana

RSS

Alta × cwe-20 × Limpiar todo ×

M Alto vulnerabilidad

[CVE-2026-58292] Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to exec…

Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-57985] Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to exec…

Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-13341] A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to version 1.0.…

A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to version 1.0.0, which could allow a remote attacker to perform an indirect prompt injection attack and execute unintended API requests.

U Alto vulnerabilidad

[CVE-2026-54405] A malicious actor with access to the network could exploit an Improper Input Validation vulnerabilit…

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Denial of Service (DoS) attack on the application.

G Alto vulnerabilidad

[CVE-2026-14428] Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.4…

Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Alto vulnerabilidad

[CVE-2026-14429] Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a…

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Alto vulnerabilidad

[CVE-2026-14412] Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed …

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →

G Alto vulnerabilidad

[CVE-2026-14401] Insufficient validation of untrusted input in ANGLE in Google Chrome on Android prior to 150.0.7871.…

Insufficient validation of untrusted input in ANGLE in Google Chrome on Android prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-38891] An improper input validation in the gazebo_ros_diff_drive.cpp component of gazebo_plugins v3.9.0 all…

An improper input validation in the gazebo_ros_diff_drive.cpp component of gazebo_plugins v3.9.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted geometry_msgs::Twist message.

M Alto vulnerabilidad

[CVE-2026-13706] Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability i…

Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability is associated with program files includes/UrlShortenerUtils.Php.

L Alto vulnerabilidad

[CVE-2026-53488] containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, an…

containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels from an image config (LABEL instruction in Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host, via a plugin that consumes container labels for some operations. This issue has been fixed in versions 1.…

G Alto vulnerabilidad

[CVE-2026-14115] Insufficient validation of untrusted input in Cast in Google Chrome prior to 150.0.7871.47 allowed a…

Insufficient validation of untrusted input in Cast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: Low)

G Alto vulnerabilidad

[CVE-2026-14122] Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 15…

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Low)

G Alto vulnerabilidad

[CVE-2026-14084] Insufficient validation of untrusted input in Chromoting in Google Chrome prior to 150.0.7871.47 all…

Insufficient validation of untrusted input in Chromoting in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via malicious network traffic. (Chromium security severity: Low)

G Alto vulnerabilidad

[CVE-2026-14087] Heap buffer overflow in WebNN in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote at…

Heap buffer overflow in WebNN in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →

G Alto vulnerabilidad

[CVE-2026-14078] Insufficient validation of untrusted input in WebRTC in Google Chrome prior to 150.0.7871.47 allowed…

Insufficient validation of untrusted input in WebRTC in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Low)

G Alto vulnerabilidad

[CVE-2026-14060] Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 150.0.…

Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Low)

G Alto vulnerabilidad

[CVE-2026-14009] Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote a…

Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

G Alto vulnerabilidad

[CVE-2026-13968] Insufficient validation of untrusted input in DevTools in Google Chrome prior to 150.0.7871.47 allow…

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a malicious file. (Chromium security severity: Medium)

G Alto vulnerabilidad

[CVE-2026-13925] Inappropriate implementation in Downloads in Google Chrome on Windows prior to 150.0.7871.47 allowed…

Inappropriate implementation in Downloads in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Medium)

← Anterior 1 … 5 6 7 8 9 … 13 Siguiente →