Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada ahora mismo

13,539

Total alertas

3075

Críticas

10192

Altas

8

Ransomware

1800

Esta semana

RSS

Alta × visual studio code × Limpiar todo ×

M Alto vulnerabilidad

[CVE-2026-57101] Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studi…

Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

M Alto vulnerabilidad

[CVE-2026-57102] Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorize…

Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

M Alto vulnerabilidad

[CVE-2026-50520] Improper neutralization of special elements used in a command ('command injection') in Visual Studio…

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-48569] Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security…

Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

M Alto vulnerabilidad

[CVE-2026-47292] Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorize…

Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to elevate privileges locally.

M Alto vulnerabilidad

[CVE-2026-45482] Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and…

Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

M Alto vulnerabilidad

[CVE-2026-40376] Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privilege…

Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.