Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada ahora mismo

Buscando: "Microsoft" — 1234 resultados ✕ Limpiar búsqueda

13,394

Total alertas

3047

Críticas

10075

Altas

8

Ransomware

1739

Esta semana

RSS

M Alto vulnerabilidad

[CVE-2026-71331] Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation …

Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-70355] Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of…

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

M Alto vulnerabilidad

[CVE-2026-70337] Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code…

Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-70338] Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthor…

Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

M Alto vulnerabilidad

[CVE-2026-70324] Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to e…

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

M Alto vulnerabilidad

[CVE-2026-70326] Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to e…

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

M Alto vulnerabilidad

[CVE-2026-70329] Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execut…

Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →

M Alto vulnerabilidad

[CVE-2026-70321] Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex…

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-70311] Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-70313] Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose…

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

M Alto vulnerabilidad

[CVE-2026-70130] Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local…

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

M Crítico vulnerabilidad

[CVE-2026-70306] Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of…

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

M Alto vulnerabilidad

[CVE-2026-68817] Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod…

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-68810] Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c…

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-68811] Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un…

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →

M Alto vulnerabilidad

[CVE-2026-68812] Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code…

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-68814] Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally…

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-68815] Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code…

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-68816] Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod…

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-68803] Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un…

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

← Anterior 1 2 3 4 5 … 62 Siguiente →