Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada hace 1 hora
22,093
Total alertas
4671
Críticas
16834
Altas
8
Ransomware
1003
Esta semana
RSS
Crítica × cwe-416 × Limpiar todo ×
A Crítico vulnerabilidad
27/07/2026
[CVE-2026-64703] A use after free issue was addressed with improved memory management. This issue is fixed in macOS S…
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a denial-of-service.
nvdcriticovulnerabilidad CVSS 9.8 NVD
A Crítico vulnerabilidad
27/07/2026
[CVE-2026-43822] A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.…
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
nvdcriticovulnerabilidad CVSS 9.8 NVD
A Crítico vulnerabilidad
27/07/2026
[CVE-2026-43810] The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26…
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
nvdcriticovulnerabilidad CVSS 9.8 NVD
A Crítico vulnerabilidad
27/07/2026
[CVE-2026-43812] A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.…
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. An app may be able to cause unexpected system termination.
nvdcriticovulnerabilidad CVSS 9.8 NVD
A Crítico vulnerabilidad
27/07/2026
[CVE-2026-43814] A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.…
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
nvdcriticovulnerabilidad CVSS 9.8 NVD
A Crítico vulnerabilidad
27/07/2026
[CVE-2026-43799] A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.…
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
nvdcriticovulnerabilidad CVSS 9.8 NVD
A Crítico vulnerabilidad
27/07/2026
[CVE-2026-43778] A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.…
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.
nvdcriticovulnerabilidad CVSS 9.8 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
A Crítico vulnerabilidad
27/07/2026
[CVE-2026-28928] A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.…
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
nvdcriticovulnerabilidad CVSS 9.8 NVD
G Crítico vulnerabilidad
21/07/2026
[CVE-2026-16424] Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker …
Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
nvdcriticovulnerabilidad CVSS 9.6 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-16367] Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability wa…
Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
nvdcriticovulnerabilidad CVSS 10.0 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-16356] Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was…
Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-16351] Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed …
Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-16352] Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was…
Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Crítico vulnerabilidad
21/07/2026
[CVE-2026-16353] Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153…
Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
nvdcriticovulnerabilidad CVSS 9.8 NVD
G Crítico vulnerabilidad
20/07/2026
[CVE-2026-15899] Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a remote att…
Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
nvdcriticovulnerabilidad CVSS 9.6 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
G Crítico vulnerabilidad
20/07/2026
[CVE-2026-15900] Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker …
Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
nvdcriticovulnerabilidad CVSS 9.6 NVD
G Crítico vulnerabilidad
20/07/2026
[CVE-2026-15901] Use after free in Network in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to pote…
Use after free in Network in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
nvdcriticovulnerabilidad CVSS 9.6 NVD
L Crítico vulnerabilidad
19/07/2026
[CVE-2026-63800] In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix use-after-free in pnf…
In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix use-after-free in pnfs_update_layout() When hitting the NFS_LAYOUT_RETURN branch in pnfs_update_layout(), the code calls pnfs_prepare_to_retry_layoutget(lo). If it succeeds, pnfs_put_layout_hdr(lo) is called before trace_pnfs_update_layout(), which still references 'lo'. This results in a use-after-free when the tracep…
nvdcriticovulnerabilidad CVSS 9.8 NVD
L Crítico vulnerabilidad
19/07/2026
[CVE-2026-63795] In the Linux kernel, the following vulnerability has been resolved: 9p: avoid putting oldfid in p9_…
In the Linux kernel, the following vulnerability has been resolved: 9p: avoid putting oldfid in p9_client_walk() error path When p9_client_walk() is called with clone set to false, fid aliases oldfid. If the walk subsequently fails after the request has been sent, the error path jumps to clunk_fid, which currently calls p9_fid_put(fid) unconditionally. This drops a reference to oldfid even thou…
nvdcriticovulnerabilidad CVSS 10.0 NVD
L Crítico vulnerabilidad
19/07/2026
[CVE-2026-53384] In the Linux kernel, the following vulnerability has been resolved: serial: 8250_dw: unregister 825…
In the Linux kernel, the following vulnerability has been resolved: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails dw8250_probe() registers the 8250 port via serial8250_register_8250_port() and then, if the device has a clock, registers a clock notifier. If clk_notifier_register() fails, probe returns the error but leaves the 8250 port registered. The matching serial8250_…
nvdcriticovulnerabilidad CVSS 9.8 NVD