Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada ahora mismo

13,434

Total alertas

3054

Críticas

10108

Altas

8

Ransomware

1778

Esta semana

RSS

cwe-787 × Limpiar todo ×

M Alto vulnerabilidad

[CVE-2026-48563] Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo…

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-47653] Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo…

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-47654] Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo…

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-45645] Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code lo…

Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-45472] Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-45474] Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-45461] Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →

M Alto vulnerabilidad

[CVE-2026-44801] Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo…

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-42985] Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo…

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-42913] Concurrent execution using shared resource with improper synchronization ('race condition') in Remot…

Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-42909] Concurrent execution using shared resource with improper synchronization ('race condition') in Remot…

Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-42910] Out-of-bounds write in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate …

Out-of-bounds write in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate privileges locally.

Z Alto vulnerabilidad

[CVE-2026-5068] A remote, unauthenticated BLE peer can trigger a 2-byte out-of-bounds write in the Bluetooth host du…

A remote, unauthenticated BLE peer can trigger a 2-byte out-of-bounds write in the Bluetooth host during L2CAP LE CoC SDU reassembly. When the application enables segmentation (via chan_ops.alloc_buf) and the chosen RX pool has a user_data_size smaller than 2 bytes, the segmentation counter stored in the net_buf user_data area is written out of bounds in l2cap_chan_le_recv_seg (subsys/bluetooth/ho…

P Crítico vulnerabilidad

[CVE-2026-9698] DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were…

DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit. Attackers that can influence the error text in an application can trigger a buffer overflow.

Z Crítico vulnerabilidad

[CVE-2026-5067] A remote, unauthenticated attacker can trigger memory corruption in Zephyr's HTTP server WebSocket u…

A remote, unauthenticated attacker can trigger memory corruption in Zephyr's HTTP server WebSocket upgrade path by sending a crafted Sec-WebSocket-Key header. The HTTP/1 header parser copies the header into a fixed-size buffer using a bounded copy that does not guarantee NUL termination when the input length reaches the buffer size. During upgrade handling the buffer is copied to a local stack buf…

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →

G Alto vulnerabilidad

[CVE-2026-11690] Out of bounds read and write in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remo…

Out of bounds read and write in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

L Alto vulnerabilidad

[CVE-2026-46294] In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in io…

In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing Tony Asleson (using Claude) found a buffer overflow in dm-ioctl in the function retrieve_status: 1. The code in retrieve_status checks that the output string fits into the output buffer and writes the output string there 2. Then, the code aligns the "outptr" variable to the next …

L Alto vulnerabilidad

[CVE-2026-46281] In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix buffer overflow in…

In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix buffer overflow in vrealloc_node_align() Commit 4c5d3365882d ("mm/vmalloc: allow to set node and align in vrealloc") added the ability to force a new allocation if the current pointer is on the wrong NUMA node, or if an alignment constraint is not met, even if the user is shrinking the allocation. On this path (nee…

7 Alto vulnerabilidad

[CVE-2026-48095] 7-Zip is a file archiver with a high compression ratio. Versions 26.00 and prior contain a heap buff…

7-Zip is a file archiver with a high compression ratio. Versions 26.00 and prior contain a heap buffer overflow vulnerability caused by an under-allocation in the NTFS compressed stream buffer (GetCuSize shift UB), potentially allowing attackers to cause arbitrary code execution or application crashes. CInStream::GetCuSize() in the NTFS handler computes the compression-unit buffer size as (UInt32)…

P Crítico vulnerabilidad

[CVE-2026-10879] DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more tha…

DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders. The preparse method expands SQL placeholder characters to numbered binders of the form :pN, but only allocates three characters per binder in the buffer. Placeholders 10-99 require four characters, 100-999 require five characters, et cetera.

← Anterior 1 … 15 16 17 18 Siguiente →