Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada hace 2 horas
22,093
Total alertas
4671
Críticas
16834
Altas
8
Ransomware
1002
Esta semana
RSS
cwe-362 × Limpiar todo ×
M Alto vulnerabilidad
08/09/2026
[CVE-2026-69448] Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.0 NVD
M Alto vulnerabilidad
08/09/2026
[CVE-2026-69441] Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.0 NVD
M Alto vulnerabilidad
08/09/2026
[CVE-2026-69398] Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.0 NVD
M Alto vulnerabilidad
08/09/2026
[CVE-2026-69404] Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.0 NVD
M Alto vulnerabilidad
08/09/2026
[CVE-2026-69385] Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.0 NVD
M Alto vulnerabilidad
08/09/2026
[CVE-2026-69364] Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
08/09/2026
[CVE-2026-69319] Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.0 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
08/09/2026
[CVE-2026-68840] Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.0 NVD
M Alto vulnerabilidad
08/09/2026
[CVE-2026-68824] Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.0 NVD
M Alto vulnerabilidad
08/09/2026
[CVE-2026-50349] Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.0 NVD
M Alto vulnerabilidad
30/08/2026
[CVE-2026-82543] A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the functio…
A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the function update_file_usage of the file apps/base/views.py of the component Pickup Limit Handler. Performing a manipulation results in race condition. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 2.5.0 is able to resolve this issue. The patc…
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
28/08/2026
Vulnerabilidad alta en free5GC 1.4.4 permite acceso no autorizado a contexto de autenticación
free5GC, implementación de código abierto del núcleo 5G, presenta una vulnerabilidad en el componente AUSF (Authentication Server Function) en versiones 1.4.4 y anteriores. El almacenamiento inseguro de estado de autenticación por suscriptor en una estructura global permite que atacantes accedan o manipulen credenciales de usuarios. Esta vulnerabilidad afecta directamente a operadores de telecomunicaciones y proveedores de infraestructura 5G en LATAM que ejecuten free5GC en entornos de producción.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
26/08/2026
[CVE-2026-58093] The TIOCSCTTY ioctl handler drops the tty lock in order to acquire the process tree lock. After rea…
The TIOCSCTTY ioctl handler drops the tty lock in order to acquire the process tree lock. After reacquiring the tty lock, the handler did not revalidate the state of the terminal, and could proceed to link a terminal that was concurrently being destroyed to the calling process' session. An unprivileged local user can exploit this race condition to escalate privileges.
nvdaltovulnerabilidad CVSS 7.0 NVD
G Alto vulnerabilidad
25/08/2026
[CVE-2026-78915] Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjace…
Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
25/08/2026
[CVE-2026-78934] Race condition in ReadAloud in Google Chrome prior to 152.0.7977.65 allowed a remote attacker levera…
Race condition in ReadAloud in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.3 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
G Alto vulnerabilidad
25/08/2026
[CVE-2026-78906] Race condition in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potenti…
Race condition in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvdaltovulnerabilidad CVSS 7.5 NVD
G Alto vulnerabilidad
25/08/2026
[CVE-2026-78901] Race condition in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute ar…
Race condition in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
20/08/2026
[CVE-2026-77638] Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous …
Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle (impersonate) the onion service that the client was trying to reach.
nvdaltovulnerabilidad CVSS 8.9 NVD
M Alto vulnerabilidad
19/08/2026
[CVE-2026-62727] Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.0 NVD
M Alto vulnerabilidad
19/08/2026
[CVE-2026-45742] Gotenberg is a Docker-powered stateless API for PDF files. From 8.10.0 until 8.33.0, the newContext …
Gotenberg is a Docker-powered stateless API for PDF files. From 8.10.0 until 8.33.0, the newContext function in pkg/modules/api/context.go starts one errgroup.Go goroutine for each multipart downloadFrom entry and allows those goroutines to concurrently write to the shared ctx.files, ctx.diskToOriginal, and ctx.filesByField maps and slices. Go maps and slices are not safe for concurrent mutation, …
nvdaltovulnerabilidad CVSS 7.5 NVD