Alertas de Seguridad de la Información

7 Alto vulnerabilidad

05/06/2026

[CVE-2026-48095] 7-Zip is a file archiver with a high compression ratio. Versions 26.00 and prior contain a heap buff…

7-Zip is a file archiver with a high compression ratio. Versions 26.00 and prior contain a heap buffer overflow vulnerability caused by an under-allocation in the NTFS compressed stream buffer (GetCuSize shift UB), potentially allowing attackers to cause arbitrary code execution or application crashes. CInStream::GetCuSize() in the NTFS handler computes the compression-unit buffer size as (UInt32)…

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

05/06/2026

Vulnerabilidad alta en Android OS (CVE-2026-21029) con CVSS 7.8 afecta dispositivos en LATAM

Google Android ha publicado un advisory sobre una vulnerabilidad de severidad alta (CVSS 7.8) en Android OS que impacta millones de dispositivos móviles en México y Latinoamérica, representando más del 80% del parque móvil regional. Esta falla de seguridad requiere actualización inmediata en todos los equipos corporativos y personales para prevenir explotación remota.

google-androidseguridad-movilandroid-os CVSS 7.8 NVD

S Alto vulnerabilidad

05/06/2026

[CVE-2026-21031] Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch a…

Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity. User interaction is required for triggering this vulnerability.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

05/06/2026

[CVE-2026-11332] A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency speci…

A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galax…

nvdaltovulnerabilidad CVSS 7.8 NVD

G Alto vulnerabilidad

05/06/2026

[CVE-2026-11272] Insufficient validation of untrusted input in Reading List in Google Chrome on iOS prior to 149.0.78…

Insufficient validation of untrusted input in Reading List in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform privilege escalation via a crafted HTML page. (Chromium security severity: Low)

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

05/06/2026

[CVE-2026-10586] The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress i…

The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.1.3 via the `save_ai_generated_image()` function. This makes it possible for authenticated attackers, with Author-level access and above, to make web requests to arbitrary locations originating from the web applicati…

nvdaltovulnerabilidad CVSS 7.2 NVD

G Alto vulnerabilidad

04/06/2026

[CVE-2026-11237] Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed …

Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

nvdaltovulnerabilidad CVSS 8.3 NVD

G Alto vulnerabilidad

04/06/2026

[CVE-2026-11177] Use after free in Omnibox in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who conv…

Use after free in Omnibox in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

04/06/2026

Vulnerabilidad alta en Android OS (CVE-2026-11172) — CVSS 8.8

Se ha identificado una vulnerabilidad de seguridad alta en Android OS con puntuación CVSS 8.8 que afecta dispositivos móviles en México y Latinoamérica, representando más del 80% del mercado móvil regional. Esta falla compromete la integridad y disponibilidad de sistemas en dispositivos Android, impactando tanto usuarios individuales como infraestructuras corporativas que dependen de estos equipos.

google-androidseguridad-movilandroid-os CVSS 8.8 NVD

G Alto vulnerabilidad

04/06/2026

Vulnerabilidad alta en Android OS (CVE-2026-11085) - CVSS 8.8

Google ha publicado un parche de seguridad para una vulnerabilidad alta en Android OS con puntuación CVSS de 8.8. Esta falla afecta a más del 80% de dispositivos móviles en México y Latinoamérica, exponiendo equipos corporativos y personales a compromisos de seguridad. La actualización está disponible en todos los canales de distribución de Android.

google-androidseguridad-movilandroid-os CVSS 8.8 NVD

G Alto vulnerabilidad

04/06/2026

[CVE-2026-11042] Use after free in Views in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convin…

Use after free in Views in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

04/06/2026

[CVE-2026-10995] Heap buffer overflow in TabStrip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker w…

Heap buffer overflow in TabStrip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

04/06/2026

[CVE-2026-10989] Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker…

Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

04/06/2026

[CVE-2026-10991] Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced…

Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

04/06/2026

[CVE-2026-10958] Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote att…

Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

04/06/2026

[CVE-2026-10945] Use after free in PDF in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convince…

Use after free in PDF in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

04/06/2026

[CVE-2026-10946] Heap buffer overflow in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who …

Heap buffer overflow in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 7.5 NVD

G Alto vulnerabilidad

04/06/2026

[CVE-2026-10951] Use after free in Autofill in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker …

Use after free in Autofill in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

04/06/2026

[CVE-2026-10942] Inappropriate implementation in UI in Google Chrome on Windows prior to 149.0.7827.53 allowed a loca…

Inappropriate implementation in UI in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 7.8 NVD

G Alto vulnerabilidad

04/06/2026

[CVE-2026-10922] Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allow…

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin policy via malicious network traffic. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.8 NVD