Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
13,434
Total alertas
3054
Críticas
10108
Altas
8
Ransomware
1778
Esta semana
RSS
macos × Limpiar todo ×
A Alto vulnerabilidad
27/07/2026
[CVE-2026-43672] An authorization issue was addressed with improved state management. This issue is fixed in macOS Se…
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious application may be able to bypass Privacy preferences.
nvdaltovulnerabilidad CVSS 7.1 NVD
A Alto vulnerabilidad
27/07/2026
[CVE-2026-43681] A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia …
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A local user may be able to read kernel memory.
nvdaltovulnerabilidad CVSS 7.1 NVD
A Crítico vulnerabilidad
27/07/2026
[CVE-2026-39873] The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, …
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious SMB server may lead to unexpected system termination.
nvdcriticovulnerabilidad CVSS 9.8 NVD
A Alto vulnerabilidad
27/07/2026
[CVE-2026-39874] A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia…
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges.
nvdaltovulnerabilidad CVSS 7.8 NVD
A Alto vulnerabilidad
27/07/2026
[CVE-2026-39875] A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia…
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges.
nvdaltovulnerabilidad CVSS 7.8 NVD
A Alto vulnerabilidad
27/07/2026
[CVE-2026-39877] A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS …
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to disclose kernel memory.
nvdaltovulnerabilidad CVSS 7.8 NVD
A Alto vulnerabilidad
27/07/2026
[CVE-2026-28945] A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS…
A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to bypass network restrictions.
nvdaltovulnerabilidad CVSS 7.1 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
A Alto vulnerabilidad
27/07/2026
[CVE-2026-28981] A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia …
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Processing a maliciously crafted image may lead to arbitrary code execution.
nvdaltovulnerabilidad CVSS 7.8 NVD
A Crítico vulnerabilidad
27/07/2026
[CVE-2026-28982] A race condition was addressed with improved locking. This issue is fixed in macOS Sequoia 15.7.8, m…
A race condition was addressed with improved locking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
nvdcriticovulnerabilidad CVSS 9.8 NVD
A Crítico vulnerabilidad
27/07/2026
[CVE-2026-28911] The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, m…
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to corrupt memory of a system process.
nvdcriticovulnerabilidad CVSS 9.8 NVD
A Alto vulnerabilidad
27/07/2026
[CVE-2026-28912] A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8,…
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A user may be able to elevate privileges.
nvdaltovulnerabilidad CVSS 7.8 NVD
A Alto vulnerabilidad
27/07/2026
[CVE-2026-28926] A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15…
A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to elevate privileges.
nvdaltovulnerabilidad CVSS 7.0 NVD
A Alto vulnerabilidad
27/07/2026
[CVE-2026-28896] The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, …
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An attacker may be able to cause unexpected system termination or read kernel memory.
nvdaltovulnerabilidad CVSS 7.7 NVD
A Medio vulnerabilidad
27/07/2026
macOS 26.6 (25G72)
Apple lanza actualización de seguridad para macOS versión 26.6. Esta actualización incluye parches de seguridad importantes. Se recomienda actualizar de inmediato en todos los dispositivos Apple.
seguridad-movilmacos Apple Security
G Crítico vulnerabilidad
20/07/2026
[CVE-2026-15899] Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a remote att…
Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
nvdcriticovulnerabilidad CVSS 9.6 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
L Alto vulnerabilidad
17/07/2026
[CVE-2026-13445] IBM Langflow OSS 1.0.0 through 1.10.1 can allow an authenticated attacker to exploit the SaveToFile …
IBM Langflow OSS 1.0.0 through 1.10.1 can allow an authenticated attacker to exploit the SaveToFile component to read and modify another user's uploaded files by specifying absolute paths pointing to victim storage locations. In append mode, the attacker's workflow reads victim file contents, appends attacker-controlled data, and uploads a copy containing victim data to the attacker's namespace (c…
nvdaltovulnerabilidad CVSS 8.1 NVD
L Crítico vulnerabilidad
17/07/2026
[CVE-2026-13446] IBM Langflow OSS 1.0.0 through 1.10.1 contains hard-coded credentials, such as a password or cryptog…
IBM Langflow OSS 1.0.0 through 1.10.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
nvdcriticovulnerabilidad CVSS 9.8 NVD
L Crítico vulnerabilidad
17/07/2026
[CVE-2026-8505] IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow's webhook authentication logic…
IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow's webhook authentication logic allows unauthenticated users to trigger the execution of any flow. The system incorrectly bypasses API key validation when the WEBHOOK_AUTH_ENABLE configuration is set to False (which is the default setting). This allows a remote attacker who knows a flow's UUID to execute it as if they were the ow…
nvdcriticovulnerabilidad CVSS 9.8 NVD
L Crítico vulnerabilidad
17/07/2026
[CVE-2026-8635] IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser…
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions.
nvdcriticovulnerabilidad CVSS 9.9 NVD
L Crítico vulnerabilidad
17/07/2026
[CVE-2026-8859] IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to u…
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations due to improper input validation in the APIRequest component. A path traversal vulnerability exists when the "Save to File" feature is enabled, where filenames extracted from HTTP response Content-Disposition headers are not sanitized before being joined to the temporary director…
nvdcriticovulnerabilidad CVSS 9.9 NVD