Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada ahora mismo

13,566

Total alertas

3081

Críticas

10213

Altas

8

Ransomware

1780

Esta semana

RSS

Crítica × critico × Limpiar todo ×

G Crítico vulnerabilidad

[CVE-2026-13851] Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 15…

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: High)

G Crítico vulnerabilidad

[CVE-2026-13852] Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 15…

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: High)

G Crítico vulnerabilidad

[CVE-2026-13853] Use after free in Journeys in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had…

Use after free in Journeys in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Crítico vulnerabilidad

[CVE-2026-13854] Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker w…

Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Crítico vulnerabilidad

[CVE-2026-13843] Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.…

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Crítico vulnerabilidad

[CVE-2026-13796] Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who…

Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Crítico vulnerabilidad

[CVE-2026-13797] Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.47 all…

Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →

G Crítico vulnerabilidad

[CVE-2026-13798] Heap buffer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker…

Heap buffer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Crítico vulnerabilidad

[CVE-2026-13782] Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had …

Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

G Crítico vulnerabilidad

[CVE-2026-13785] Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker…

Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

G Crítico vulnerabilidad

[CVE-2026-13789] Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had comp…

Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Crítico vulnerabilidad

[CVE-2026-13792] Use after free in Touchbar in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker …

Use after free in Touchbar in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Crítico vulnerabilidad

[CVE-2026-13775] Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had comp…

Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

G Crítico vulnerabilidad

[CVE-2026-13776] Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had com…

Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

G Crítico vulnerabilidad

[CVE-2026-13780] Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed …

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →

G Crítico vulnerabilidad

[CVE-2026-13781] Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.47 allowed a…

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

M Crítico vulnerabilidad

[CVE-2026-58449] txtai through 9.10.0, fixed in commit 11b32da, exposes an API /reindex endpoint whose function body …

txtai through 9.10.0, fixed in commit 11b32da, exposes an API /reindex endpoint whose function body parameter is resolved through txtai.util.Resolver, which performs __import__ and getattr on the caller-supplied dotted path with no allowlist. When the API is exposed with no TOKEN configured (authentication is opt-in, so all endpoints are unauthenticated) and the index is configured writable, a rem…

M Crítico vulnerabilidad

[CVE-2026-50003] A malicious or compromised server can make a DCMTK client using bit-preserving C-GET storage mode wr…

A malicious or compromised server can make a DCMTK client using bit-preserving C-GET storage mode write files outside the chosen output directory, using both relative (../) paths and absolute paths.

M Crítico vulnerabilidad

[CVE-2026-37106] An issue in DokuWiki 2025-05-14b "Librarian" 56.2 allows a remote attacker to create an account via …

An issue in DokuWiki 2025-05-14b "Librarian" 56.2 allows a remote attacker to create an account via the register function in inc/auth.php. NOTE: this is disputed by the Supplier because this is the intentional behavior when the product is configured for self-registration (a non-default feature). The supplier also notes that there is no configuration migration scenario that would result in the self…

L Crítico vulnerabilidad

[CVE-2026-7663] IBM Langflow OSS 1.0.0 through 1.9.6 could allow unauthenticated attackers to access protected MCP p…

IBM Langflow OSS 1.0.0 through 1.9.6 could allow unauthenticated attackers to access protected MCP project resources and execute MCP operations due to improper authorization enforcement in the Streamable MCP transport endpoint.

← Anterior 1 … 106 107 108 109 110 … 149 Siguiente →