Alertas de Seguridad de la Información

M Alto vulnerabilidad

28/07/2026

[CVE-2026-42493] Addressing certain issues, in particular related to operations which may take excessively long and t…

Addressing certain issues, in particular related to operations which may take excessively long and therefore would need preemption, has turned out overly costly. Since alternatives (HVM/PVH: HAP, PV: shim) are commonly available, the decision was to deprecate the functionality, while still retaining it for people to use at their own (security) risk. Memory-wise small enough guests may still be o…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

27/07/2026

[CVE-2026-64552] In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix len check in re…

In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix len check in receive_big() receive_big() bounds the device-announced length by (big_packets_num_skbfrags + 1) * PAGE_SIZE. That is still too loose: add_recvbuf_big() sets sg[1] to start at offset sizeof(struct padded_vnet_hdr) into the first page, so the chain actually carries hdr_len + (PAGE_SIZE - sizeof(padde…

nvdaltovulnerabilidad CVSS 8.4 NVD

M Alto vulnerabilidad

27/07/2026

[CVE-2026-64546] In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in drm_p…

In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in drm_parse_tiled_block() drm_parse_tiled_block() casts the DisplayID block to a struct displayid_tiled_block and reads the full fixed layout up to tile->topology_id[7] without checking block->num_bytes. The DisplayID iterator only validates the declared payload length, so a crafted EDID can advertise a t…

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

27/07/2026

[CVE-2026-64539] In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix stack OOB w…

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix stack OOB write when prepending the Flags AD eir_create_adv_data() builds the advertising data into a fixed-size buffer ("size", 31 for the legacy path). It may prepend a 3-byte "Flags" AD structure (LE_AD_NO_BREDR on an LE-only controller) and then copies the per-instance data without checking that it still …

nvdaltovulnerabilidad CVSS 7.8 NVD

J Alto vulnerabilidad

27/07/2026

[CVE-2026-65921] A path validation weakness in archive extraction/write handling allows entries with traversal sequen…

A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written outside the intended build artifacts location.

nvdaltovulnerabilidad CVSS 8.8 NVD

J Alto vulnerabilidad

27/07/2026

[CVE-2026-65922] An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with li…

An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository access to write to restricted internal metadata areas under specific conditions. Successful abuse is limited to integrity and availability impact at a low level; confidentiality is not affected.

nvdaltovulnerabilidad CVSS 7.1 NVD

J Alto vulnerabilidad

27/07/2026

[CVE-2026-66014] JFrog Artifactory contains an authentication handling weakness in internal request processing that, …

JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific conditions, may allow an attacker to escalate privileges beyond the intended access level.

nvdaltovulnerabilidad CVSS 8.8 NVD

J Alto vulnerabilidad

27/07/2026

[CVE-2026-65617] A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user t…

A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and availability under specific repository conditions.

nvdaltovulnerabilidad CVSS 8.8 NVD

J Alto vulnerabilidad

27/07/2026

[CVE-2026-42016] JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation at…

JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.

nvdaltovulnerabilidad CVSS 8.1 NVD

J Alto vulnerabilidad

27/07/2026

[CVE-2026-42017] An event-handling weakness in JFrog Artifactory could expose privileged authorization material to a …

An event-handling weakness in JFrog Artifactory could expose privileged authorization material to a lower-privileged user under specific conditions.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

27/07/2026

[CVE-2026-12383] A flaw was found in the Event-Driven Ansible (EDA) server. The ExternalEventStreamViewSet uses permi…

A flaw was found in the Event-Driven Ansible (EDA) server. The ExternalEventStreamViewSet uses permissive access controls (permission_classes=[AllowAny], authentication_classes=[]) and relies solely on the Subject HTTP header value for mTLS authentication without verifying that the header originated from a trusted proxy. Additionally, the expected certificate Distinguished Name is leaked in the 40…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

27/07/2026

[CVE-2026-66730] facil.io 0.6.0 through 0.7.6 contains a denial-of-service vulnerability in the multipart body parser…

facil.io 0.6.0 through 0.7.6 contains a denial-of-service vulnerability in the multipart body parser that allows an unauthenticated remote attacker to permanently freeze worker processes at 100% CPU by sending a multipart/form-data request with a partial closing boundary. The missing progress guard in the parser loop causes http_mime_parse to return 0 bytes consumed without setting done or error f…

nvdaltovulnerabilidad CVSS 7.5 NVD

A Alto vulnerabilidad

27/07/2026

[CVE-2026-48145] Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift C++ bindings. …

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

nvdaltovulnerabilidad CVSS 7.5 NVD

F Alto vulnerabilidad

27/07/2026

[CVE-2025-68686] Vulnerabilidad explotada activamente en Fortinet FortiOS

CISA confirma explotación activa de una vulnerabilidad en Fortinet FortiOS. No se ha confirmado uso en campañas de ransomware conocidas. Fecha límite para aplicar parche según directiva CISA: 2026-08-10.

explotación activavulnerabilidad CISA KEV

M Alto vulnerabilidad

26/07/2026

[CVE-2026-57990] Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an una…

Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

nvdaltovulnerabilidad CVSS 7.4 NVD

M Alto vulnerabilidad

25/07/2026

[CVE-2026-64520] In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTIT…

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies The register-based PARTITION_INFO_GET path trusted the firmware-provided indices when copying partition descriptors into the caller buffer. Reject inconsistent counts or index progressions so the copy loop cannot write past the allocated array. (fixed cur_idx when exactly …

nvdaltovulnerabilidad CVSS 8.4 NVD

M Alto vulnerabilidad

25/07/2026

[CVE-2026-64490] In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: Validate control …

In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: Validate control metadata from the device virtio-snd control handling trusts the device-provided control type and value count returned by the device. That metadata is then used directly to index g_v2a_type_map[] in virtsnd_kctl_info(), and to size loops and memcpy() operations in virtsnd_kctl_get() and virtsnd_kct…

nvdaltovulnerabilidad CVSS 8.4 NVD

M Alto vulnerabilidad

25/07/2026

[CVE-2026-64456] In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio: clamp device-rep…

In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio: clamp device-reported used.len at copy_data() random_recv_done() stores the device-reported used.len directly into vi->data_avail. copy_data() then indexes vi->data[] using vi->data_idx (advanced by previous copy_data() calls) and issues a memcpy() without re-validating either value against the posted buffer size…

nvdaltovulnerabilidad CVSS 7.7 NVD

M Alto vulnerabilidad

25/07/2026

[CVE-2026-64318] In the Linux kernel, the following vulnerability has been resolved: partitions: aix: bound the pp_c…

In the Linux kernel, the following vulnerability has been resolved: partitions: aix: bound the pp_count scan to the ppe array aix_partition() reads the physical volume descriptor into a fixed-size struct pvd and then scans its physical-partition-extent array: int numpps = be16_to_cpu(pvd->pp_count); ... for (i = 0; i < numpps; i += 1) { struct ppe *p = pvd->ppe + i; ... lp_ix = be16_to…

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

25/07/2026

[CVE-2026-64323] In the Linux kernel, the following vulnerability has been resolved: udf: validate VAT header length…

In the Linux kernel, the following vulnerability has been resolved: udf: validate VAT header length against the VAT inode size udf_load_vat() takes the virtual partition's start offset straight from the on-disk VAT 2.0 header without checking it against the VAT inode size: map->s_type_specific.s_virtual.s_start_offset = le16_to_cpu(vat20->lengthHeader); map->s_type_specific.s_virtual.s_num_…

nvdaltovulnerabilidad CVSS 7.1 NVD