Alertas de Seguridad de la Información

M Crítico vulnerabilidad

19/06/2026

[CVE-2026-45480] Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privile…

Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network.

nvdcriticovulnerabilidad CVSS 10.0 NVD

M Crítico vulnerabilidad

19/06/2026

[CVE-2025-62821] Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDat…

Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copy_size = stride * abs(roi_height) but does not check the source buffer length before a memmove call.

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Crítico vulnerabilidad

18/06/2026

[CVE-2026-54130] Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disc…

Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

18/06/2026

[CVE-2026-47647] Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privilege…

Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privileges over a network.

nvdcriticovulnerabilidad CVSS 9.9 NVD

G Crítico vulnerabilidad

17/06/2026

[CVE-2026-12440] Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a r…

Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

nvdcriticovulnerabilidad CVSS 9.6 NVD

A Crítico vulnerabilidad

09/06/2026

[CVE-2026-48303] Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Auth…

Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.

nvdcriticovulnerabilidad CVSS 10.0 NVD

M Crítico vulnerabilidad

09/06/2026

[CVE-2026-47643] External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute…

External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

09/06/2026

[CVE-2026-47291] Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code o…

Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

09/06/2026

[CVE-2026-45657] Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network.

Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

09/06/2026

[CVE-2026-47281] Missing authorization in Visual Studio Code allows an unauthorized attacker to elevate privileges ov…

Missing authorization in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

nvdcriticovulnerabilidad CVSS 9.6 NVD

M Crítico vulnerabilidad

09/06/2026

[CVE-2026-45602] No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering ov…

No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network.

nvdcriticovulnerabilidad CVSS 9.1 NVD

M Crítico vulnerabilidad

09/06/2026

[CVE-2026-44815] Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to execute code o…

Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to execute code over a network.

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

09/06/2026

[CVE-2026-42904] Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges o…

Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network.

nvdcriticovulnerabilidad CVSS 9.6 NVD

M Crítico vulnerabilidad

09/06/2026

[CVE-2026-26142] Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute c…

Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network.

nvdcriticovulnerabilidad CVSS 9.8 NVD

G Crítico vulnerabilidad

09/06/2026

[CVE-2026-11634] Use after free in Gamepad in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attac…

Use after free in Gamepad in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

nvdcriticovulnerabilidad CVSS 9.6 NVD

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11094] Use after free in Codecs in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacke…

Use after free in Codecs in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

nvdcriticovulnerabilidad CVSS 9.6 NVD

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11070] Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 149.0.…

Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the network process to potentially perform a sandbox escape via malicious network traffic. (Chromium security severity: Medium)

nvdcriticovulnerabilidad CVSS 9.6 NVD

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11056] Insufficient validation of untrusted input in SiteIsolation in Google Chrome on Windows prior to 149…

Insufficient validation of untrusted input in SiteIsolation in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

nvdcriticovulnerabilidad CVSS 9.6 NVD

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11063] Insufficient validation of untrusted input in WebNN in Google Chrome on Windows prior to 149.0.7827.…

Insufficient validation of untrusted input in WebNN in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

nvdcriticovulnerabilidad CVSS 9.6 NVD

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11047] Inappropriate implementation in Base in Google Chrome on Windows prior to 149.0.7827.53 allowed a re…

Inappropriate implementation in Base in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

nvdcriticovulnerabilidad CVSS 9.6 NVD