Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada hace 1 hora
Buscando: "Google" — 844 resultados ✕ Limpiar búsqueda
13,539
Total alertas
3075
Críticas
10192
Altas
8
Ransomware
1758
Esta semana
RSS
M Alto vulnerabilidad
25/06/2026
[CVE-2026-56767] Maxun before 0.0.42 contains a cross-tenant insecure direct object reference vulnerability in storag…
Maxun before 0.0.42 contains a cross-tenant insecure direct object reference vulnerability in storage and webhook API handlers that allows authenticated users to access other users' robots and OAuth tokens. Attackers can read plaintext Google and Airtable access tokens, modify, delete, or execute other users' robots by bypassing ownership checks in API endpoints.
nvdaltovulnerabilidad CVSS 8.8 NVD
G Alto vulnerabilidad
24/06/2026
[CVE-2026-13038] Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.197 allowed a remote atta…
Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Crítico vulnerabilidad
24/06/2026
[CVE-2026-13028] Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacke…
Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
nvdcriticovulnerabilidad CVSS 9.6 NVD
G Alto vulnerabilidad
24/06/2026
[CVE-2026-13029] Use after free in Web Authentication in Google Chrome prior to 149.0.7827.197 allowed an attacker wh…
Use after free in Web Authentication in Google Chrome prior to 149.0.7827.197 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 7.5 NVD
G Alto vulnerabilidad
24/06/2026
[CVE-2026-13031] Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execut…
Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Crítico vulnerabilidad
24/06/2026
[CVE-2026-13032] Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacke…
Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
nvdcriticovulnerabilidad CVSS 9.6 NVD
G Alto vulnerabilidad
24/06/2026
[CVE-2026-13033] Out of bounds read and write in Blink>InterestGroups in Google Chrome prior to 149.0.7827.197 allowe…
Out of bounds read and write in Blink>InterestGroups in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)
nvdaltovulnerabilidad CVSS 8.8 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
G Alto vulnerabilidad
24/06/2026
[CVE-2026-13035] Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacke…
Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code via a malicious peripheral. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Alto vulnerabilidad
24/06/2026
[CVE-2026-13036] Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execut…
Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Alto vulnerabilidad
24/06/2026
[CVE-2026-13037] Use after free in WebView in Google Chrome on Android prior to 149.0.7827.197 allowed a local attack…
Use after free in WebView in Google Chrome on Android prior to 149.0.7827.197 allowed a local attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 7.8 NVD
G Alto vulnerabilidad
24/06/2026
[CVE-2026-13025] Race in DevTools in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromi…
Race in DevTools in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.3 NVD
G Alto vulnerabilidad
24/06/2026
[CVE-2026-13026] Use after free in Digital Credentials in Google Chrome on Mac prior to 149.0.7827.197 allowed a remo…
Use after free in Digital Credentials in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Alto vulnerabilidad
24/06/2026
[CVE-2026-13027] Use after free in FileSystem in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to p…
Use after free in FileSystem in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Alto vulnerabilidad
24/06/2026
[CVE-2026-12537] Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versio…
Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox host-level code execution a maliciously crafted .gemini/.env file.
nvdaltovulnerabilidad CVSS 7.8 NVD
H Alto vulnerabilidad
23/06/2026
[CVE-2026-54318] Home Assistant is open source home automation software that puts local control and privacy first. Pr…
Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.5.3, the LocationSensorManager BroadcastReceiver is exported with no permission. Any installed app, with zero runtime permissions, can broadcast a forged Google Play Services LocationResult directly to it; the receiver trusts the extra and forwards it to the user's Home Assistant server …
nvdaltovulnerabilidad CVSS 7.1 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
P Alto vulnerabilidad
22/06/2026
[CVE-2026-48712] protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.1 and 8.4.1, p…
protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.1 and 8.4.1, protobufjs could recurse without a depth limit while converting decoded messages to plain objects or JSON. This affected generated toObject() conversion and the custom google.protobuf.Any JSON conversion path. A crafted protobuf binary payload containing deeply nested Any values could cause the JavaS…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Crítico vulnerabilidad
20/06/2026
[CVE-2019-25763] WordPress Ultimate Addons for Beaver Builder 1.2.4.1 contains an authentication bypass vulnerability…
WordPress Ultimate Addons for Beaver Builder 1.2.4.1 contains an authentication bypass vulnerability that allows attackers to gain unauthorized access by exploiting the social media login form functionality. Attackers can submit a POST request to the admin-ajax.php endpoint with the uabb-lf-google-submit action, a valid administrator email address, and a valid nonce to obtain session cookies and a…
nvdcriticovulnerabilidad CVSS 9.8 NVD
G Alto vulnerabilidad
17/06/2026
[CVE-2026-28615] In Telecomm, there is a possible way to initiate an unauthorized phone call due to a permissions byp…
In Telecomm, there is a possible way to initiate an unauthorized phone call due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
nvdaltovulnerabilidad CVSS 7.8 NVD
G Alto vulnerabilidad
17/06/2026
[CVE-2026-12468] Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had co…
Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.3 NVD
G Alto vulnerabilidad
17/06/2026
[CVE-2026-12462] Use after free in Media in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had c…
Use after free in Media in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 7.5 NVD