Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada ahora mismo

22,093

Total alertas

4671

Críticas

16834

Altas

8

Ransomware

1023

Esta semana

RSS

Crítica × google × Limpiar todo ×

G Crítico vulnerabilidad

[CVE-2026-13851] Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 15…

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: High)

G Crítico vulnerabilidad

[CVE-2026-13852] Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 15…

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: High)

G Crítico vulnerabilidad

[CVE-2026-13789] Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had comp…

Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Crítico vulnerabilidad

[CVE-2026-11720] A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When …

A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When constructing downstream API requests, the URL builder substitutes user-controlled pathParams into the configured tool path and parses the resulting string as a relative URL. While it checks that the input does not alter the scheme, host, or user info, it relies on ResolveReference for the final URL …

G Crítico vulnerabilidad

[CVE-2026-13028] Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacke…

Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

G Crítico vulnerabilidad

[CVE-2026-13032] Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacke…

Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

G Crítico vulnerabilidad

[CVE-2026-0126] In WC-Radio, there is a possible out of bounds write due to a missing bounds check. This could lead …

In WC-Radio, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →

G Crítico vulnerabilidad

[CVE-2026-11120] Insufficient validation of untrusted input in Enterprise Reporting in Google Chrome prior to 149.0.7…

Insufficient validation of untrusted input in Enterprise Reporting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

G Crítico vulnerabilidad

[CVE-2026-11113] Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed …

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

G Crítico vulnerabilidad

[CVE-2026-11095] Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed…

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

G Crítico vulnerabilidad

[CVE-2026-11088] Integer overflow in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had …

Integer overflow in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

G Crítico vulnerabilidad

[CVE-2026-11065] Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had co…

Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

G Crítico vulnerabilidad

[CVE-2026-11066] Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed …

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

G Crítico vulnerabilidad

[CVE-2026-11061] Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potenti…

Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

G Crítico vulnerabilidad

[CVE-2026-11029] Insufficient validation of untrusted input in Drag and Drop in Google Chrome on Android prior to 149…

Insufficient validation of untrusted input in Drag and Drop in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →

G Crítico vulnerabilidad

[CVE-2026-11002] Use after free in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had…

Use after free in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

G Crítico vulnerabilidad

[CVE-2026-10990] Use after free in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had com…

Use after free in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

G Crítico vulnerabilidad

[CVE-2026-10983] Insufficient validation of untrusted input in Dawn in Google Chrome prior to 149.0.7827.53 allowed a…

Insufficient validation of untrusted input in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Crítico vulnerabilidad

[CVE-2026-10974] Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed …

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Crítico vulnerabilidad

[CVE-2026-10966] Inappropriate implementation in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote atta…

Inappropriate implementation in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: High)

← Anterior 1 2 3 4 5 Siguiente →