Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada hace 8 horas

13,736

Total alertas

3106

Críticas

10358

Altas

8

Ransomware

1029

Esta semana

RSS

nvd × 30 días × Limpiar todo ×

M Alto vulnerabilidad

[CVE-2026-70326] Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to e…

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

M Alto vulnerabilidad

[CVE-2026-70329] Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execut…

Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-70321] Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex…

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-70307] Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele…

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

M Alto vulnerabilidad

[CVE-2026-70311] Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-70313] Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose…

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

M Alto vulnerabilidad

[CVE-2026-69306] Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypas…

Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →

M Alto vulnerabilidad

[CVE-2026-69320] Improper neutralization of special elements used in an os command ('os command injection') in Visual…

Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-70130] Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local…

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

M Crítico vulnerabilidad

[CVE-2026-70306] Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of…

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

M Alto vulnerabilidad

[CVE-2026-68817] Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod…

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-68820] Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele…

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

M Alto vulnerabilidad

[CVE-2026-68821] Improper privilege management in Windows Package Manager allows an authorized attacker to elevate pr…

Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally.

M Alto vulnerabilidad

[CVE-2026-69278] Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security f…

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

M Alto vulnerabilidad

[CVE-2026-68810] Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c…

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →

M Alto vulnerabilidad

[CVE-2026-68811] Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un…

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-68812] Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code…

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-68814] Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally…

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-68815] Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code…

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-68816] Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod…

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

← Anterior 1 … 139 140 141 142 143 … 247 Siguiente →