Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
13,696
Total alertas
3097
Críticas
10327
Altas
8
Ransomware
1841
Esta semana
RSS
M Crítico vulnerabilidad
30/07/2026
[CVE-2026-16610] The Admin and Site Enhancements (ASE) Pro plugin for WordPress is vulnerable to Remote Code Executio…
The Admin and Site Enhancements (ASE) Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.9.0 via the recursive_html function. This is due to the frontend save handler enforces only a publicly emitted nonce with no authentication check, CAPTCHA validation is bypassable by omitting an attacker-supplied key, and repeater row keys from cfgroup[input…
nvdcriticovulnerabilidad CVSS 9.8 NVD
M Alto vulnerabilidad
30/07/2026
[CVE-2026-1360] The BuddyPress plugin for WordPress is vulnerable to Deserialization of Untrusted Data in all versio…
The BuddyPress plugin for WordPress is vulnerable to Deserialization of Untrusted Data in all versions up to, and including, 14.5.0 This is due to the `bp_unserialize_profile_field()` function using `@unserialize()` without the `allowed_classes` parameter on user-controlled XProfile field data. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject ar…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
30/07/2026
[CVE-2026-14356] The FleekDash V2 plugin for WordPress is vulnerable to authorization bypass in all versions up to, a…
The FleekDash V2 plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.2.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to overwrite the email address and password of any WordPress user, including administrat…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
30/07/2026
[CVE-2026-48448] Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in a…
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to gain file system read access. Exploitation of this issue does not require user interaction. Scope is changed.
nvdaltovulnerabilidad CVSS 8.6 NVD
M Crítico vulnerabilidad
30/07/2026
[CVE-2026-48449] Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could resu…
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.
nvdcriticovulnerabilidad CVSS 10.0 NVD
M Crítico vulnerabilidad
30/07/2026
[CVE-2026-18015] Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote…
Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
nvdcriticovulnerabilidad CVSS 9.6 NVD
G Alto vulnerabilidad
30/07/2026
[CVE-2026-18017] Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute …
Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 8.8 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
G Alto vulnerabilidad
30/07/2026
[CVE-2026-18012] Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execut…
Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
30/07/2026
[CVE-2026-17995] Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perf…
Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 8.1 NVD
M Crítico vulnerabilidad
30/07/2026
[CVE-2026-18002] Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0.7922.72 al…
Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
nvdcriticovulnerabilidad CVSS 9.6 NVD
M Crítico vulnerabilidad
30/07/2026
[CVE-2026-17987] Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.0.7922.72 …
Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file. (Chromium security severity: Low)
nvdcriticovulnerabilidad CVSS 9.6 NVD
G Alto vulnerabilidad
30/07/2026
[CVE-2026-17989] Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute ar…
Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 8.8 NVD
M Crítico vulnerabilidad
30/07/2026
[CVE-2026-17990] Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72 allow…
Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file. (Chromium security severity: Low)
nvdcriticovulnerabilidad CVSS 9.6 NVD
M Crítico vulnerabilidad
30/07/2026
[CVE-2026-17991] Insufficient validation of untrusted input in AI in Google Chrome prior to 151.0.7922.72 allowed a r…
Insufficient validation of untrusted input in AI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
nvdcriticovulnerabilidad CVSS 9.6 NVD
G Alto vulnerabilidad
30/07/2026
[CVE-2026-17993] Race in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perfo…
Race in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 7.0 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
G Alto vulnerabilidad
30/07/2026
[CVE-2026-17979] Race in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary co…
Race in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
30/07/2026
[CVE-2026-17967] Use after free in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote att…
Use after free in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Alto vulnerabilidad
30/07/2026
[CVE-2026-17969] Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote a…
Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
30/07/2026
[CVE-2026-17971] Inappropriate implementation in Frame in Google Chrome prior to 151.0.7922.72 allowed a remote attac…
Inappropriate implementation in Frame in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Alto vulnerabilidad
30/07/2026
[CVE-2026-17956] Inappropriate implementation in Scheduling in Google Chrome prior to 151.0.7922.72 allowed a remote …
Inappropriate implementation in Scheduling in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 8.8 NVD