Alertas de Seguridad de la Información

M Alto vulnerabilidad

Hace 3 días

CVE-2026-58547 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-58547 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).

windowseop Microsoft MSRC

M Alto vulnerabilidad

14/08/2026

CVE-2026-32153 Windows Speech Runtime Elevation of Privilege Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-32153 Windows Speech Runtime Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).

windowseop Microsoft MSRC

M Alto vulnerabilidad

13/08/2026

CVE-2026-50298 Windows Spaceport.sys Elevation of Privilege Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-50298 Windows Spaceport.sys Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).

windowseop Microsoft MSRC

M Alto vulnerabilidad

11/08/2026

CVE-2026-61936 Windows Defender Firewall Service Security Feature Bypass Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-61936 Windows Defender Firewall Service Security Feature Bypass Vulnerability. Tipo: Bypass de Característica de Seguridad.

windowssfb Microsoft MSRC

M Alto vulnerabilidad

11/08/2026

CVE-2026-70304 Windows DNS Elevation of Privilege Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-70304 Windows DNS Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).

windowseop Microsoft MSRC

M Alto vulnerabilidad

11/08/2026

CVE-2026-70330 Windows DNS Elevation of Privilege Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-70330 Windows DNS Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).

windowseop Microsoft MSRC

M Alto vulnerabilidad

22/07/2026

CVE-2026-50377 Windows Kernel Elevation of Privilege Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-50377 Windows Kernel Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).

windowseop Microsoft MSRC

A Alto vulnerabilidad

20/07/2026

[CVE-2026-56623] Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library…

Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and server-side SSH. A git server implemented with Apache MINA SSHD component sshd-git and running on Windows could allow an authenticated remote user access to git repositories outside of the configured server-side root directory. The path validation applied for CVE-2026-48827 …

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

16/07/2026

CVE-2026-58643 Windows Admin Center Spoofing Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-58643 Windows Admin Center Spoofing Vulnerability. Tipo: Suplantación (Spoofing).

windowsspoofing Microsoft MSRC

A Alto vulnerabilidad

15/07/2026

[CVE-2026-40952] CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client…

CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or server can use it to elevate privileges to Administrator when Secure Access is installed in a non-default location.

nvdaltovulnerabilidad CVSS 7.8 NVD

A Alto vulnerabilidad

14/07/2026

[CVE-2026-48337] Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code …

Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

nvdaltovulnerabilidad CVSS 7.8 NVD

A Alto vulnerabilidad

14/07/2026

[CVE-2026-48335] Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code …

Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

nvdaltovulnerabilidad CVSS 7.8 NVD

A Alto vulnerabilidad

14/07/2026

[CVE-2026-48336] Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code …

Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

nvdaltovulnerabilidad CVSS 7.8 NVD

A Alto vulnerabilidad

14/07/2026

[CVE-2026-48275] Illustrator is affected by an Untrusted Search Path vulnerability that could result in arbitrary cod…

Illustrator is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

nvdaltovulnerabilidad CVSS 8.6 NVD

A Alto vulnerabilidad

14/07/2026

[CVE-2026-48344] Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerabil…

Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.

nvdaltovulnerabilidad CVSS 7.8 NVD

A Alto vulnerabilidad

14/07/2026

[CVE-2026-48272] Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could r…

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.

nvdaltovulnerabilidad CVSS 7.8 NVD

G Alto vulnerabilidad

14/07/2026

[CVE-2026-15767] Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote …

Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted video file. (Chromium security severity: High)

nvdaltovulnerabilidad CVSS 8.8 NVD

F Alto vulnerabilidad

14/07/2026

[CVE-2026-59841] A improper restriction of communication channel to intended endpoints vulnerability in Fortinet Fort…

A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of privilege via

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

14/07/2026

CVE-2026-49167 Windows Kernel Elevation of Privilege Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-49167 Windows Kernel Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).

windowseop Microsoft MSRC

M Alto vulnerabilidad

14/07/2026

CVE-2026-55000 Windows USB Print Driver Elevation of Privilege Vulnerability

Microsoft publica advisory de seguridad: CVE-2026-55000 Windows USB Print Driver Elevation of Privilege Vulnerability. Tipo: Elevación de Privilegios (EoP).

windowseop Microsoft MSRC