Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada ahora mismo

13,696

Total alertas

3097

Críticas

10327

Altas

8

Ransomware

1751

Esta semana

RSS

nvd × 30 días × Limpiar todo ×

M Alto vulnerabilidad

[CVE-2026-1289] A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulne…

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, disclose sensitive data, or execute arbitrary code in the context of the current process.

M Alto vulnerabilidad

[CVE-2026-19176] Use after free in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had co…

Use after free in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-19177] Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed a …

Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-19168] Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacke…

Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-19169] Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.…

Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: High)

M Crítico vulnerabilidad

[CVE-2026-19170] Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacke…

Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

M Alto vulnerabilidad

[CVE-2026-19172] Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had c…

Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →

M Alto vulnerabilidad

[CVE-2026-19174] Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute…

Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-19162] Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to exec…

Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-19163] Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacke…

Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-19165] Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who convin…

Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: High)

M Crítico vulnerabilidad

[CVE-2026-19149] Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker t…

Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

M Alto vulnerabilidad

[CVE-2026-19150] Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacke…

Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-19151] Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute a…

Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-19154] Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker…

Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →

M Alto vulnerabilidad

[CVE-2026-19155] Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who ha…

Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-19140] Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had com…

Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-19145] Use after free in Translate in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to ex…

Use after free in Translate in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-19111] Insecure direct object reference in the mongodb_memory, elasticsearch_memory, and mem0_memory tools …

Insecure direct object reference in the mongodb_memory, elasticsearch_memory, and mem0_memory tools in Amazon Strands Agents Tools before 0.8.3 might allow remote authenticated users to access, modify, or delete memories belonging to other tenants by influencing the LLM to emit tool calls with a forged namespace parameter. To remediate this issue, users should upgrade to version 0.8.3.

M Alto vulnerabilidad

[CVE-2026-19137] Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacke…

Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

← Anterior 1 … 171 172 173 174 175 … 245 Siguiente →