Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada ahora mismo

13,394

Total alertas

3047

Críticas

10075

Altas

8

Ransomware

1739

Esta semana

RSS

google × Limpiar todo ×

G Alto vulnerabilidad

[CVE-2026-0151] In IntfGraphCreate of intfgraph.c, there is a possible out of bounds write due to an integer overflo…

In IntfGraphCreate of intfgraph.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

G Alto vulnerabilidad

[CVE-2026-0152] In OSMMapPMRGeneric of pmr_os.c, there is a possible way to leverage a system call to system call to…

In OSMMapPMRGeneric of pmr_os.c, there is a possible way to leverage a system call to system call to maliciously expand the VMA out of bounds due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

G Alto vulnerabilidad

[CVE-2026-0153] In Write of msg_to_host_buffer.cc, there is a possible out of bounds write due to an incorrect bound…

In Write of msg_to_host_buffer.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

G Alto vulnerabilidad

[CVE-2026-0132] In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to …

In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

G Alto vulnerabilidad

[CVE-2026-0133] In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootc…

In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

G Alto vulnerabilidad

[CVE-2026-0135] In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to r…

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

G Alto vulnerabilidad

[CVE-2026-0137] In edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation of privile…

In edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation of privilege due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →

G Alto vulnerabilidad

[CVE-2026-0138] In lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due to memory c…

In lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

G Alto vulnerabilidad

[CVE-2026-0139] In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to …

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

G Alto vulnerabilidad

[CVE-2026-0125] In multiple functions of vpu_ioctl.c, there is a possible use after free due to a race condition. Th…

In multiple functions of vpu_ioctl.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

G Crítico vulnerabilidad

[CVE-2026-0126] In WC-Radio, there is a possible out of bounds write due to a missing bounds check. This could lead …

In WC-Radio, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

G Alto vulnerabilidad

[CVE-2026-0131] In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow. Thi…

In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

G Alto vulnerabilidad

[CVE-2026-12028] Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker …

Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Alto vulnerabilidad

[CVE-2026-12030] Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote atta…

Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Alto vulnerabilidad

[CVE-2026-12010] Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote att…

Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →

G Alto vulnerabilidad

[CVE-2026-11645] Vulnerabilidad explotada activamente en Google Chromium V8

CISA confirma explotación activa de una vulnerabilidad en Google Chromium V8. No se ha confirmado uso en campañas de ransomware conocidas. Fecha límite para aplicar parche según directiva CISA: 2026-06-23.

G Alto vulnerabilidad

[CVE-2026-11237] Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed …

Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

G Crítico vulnerabilidad

[CVE-2026-11120] Insufficient validation of untrusted input in Enterprise Reporting in Google Chrome prior to 149.0.7…

Insufficient validation of untrusted input in Enterprise Reporting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

G Crítico vulnerabilidad

[CVE-2026-11113] Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed …

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

G Alto vulnerabilidad

[CVE-2026-11102] Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 149.0.7827.53 allowed a …

Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a malicious file. (Chromium security severity: Medium)

← Anterior 1 … 8 9 10 11 12 Siguiente →