Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
22,181
Total alertas
4701
Críticas
16892
Altas
8
Ransomware
1055
Esta semana
RSS
7 días × Limpiar todo ×
G Alto vulnerabilidad
Hace 3 días
[CVE-2026-106221] Vulnerabilidad Android en Android OS - CVSS 8.3
Vulnerabilidad de seguridad en Android (Android OS): Vulnerabilidad de seguridad en Android. CVSS: 8.3. Afecta dispositivos Android, 80%+ del mercado movil en Mexico y LATAM. Actualiza tu dispositivo en Ajustes - Actualizacion del sistema.
google-androidseguridad-movilandroid-os CVSS 8.3 NVD
M Alto vulnerabilidad
Hace 3 días
[CVE-2026-106207] Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute ar…
Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvdaltovulnerabilidad CVSS 8.8 NVD
M Crítico vulnerabilidad
Hace 3 días
[CVE-2026-106211] Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leverag…
Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvdcriticovulnerabilidad CVSS 9.6 NVD
M Alto vulnerabilidad
Hace 3 días
[CVE-2026-106212] Incorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacke…
Incorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
Hace 3 días
[CVE-2026-106200] Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute…
Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
Hace 3 días
[CVE-2026-106201] Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute ar…
Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
Hace 3 días
[CVE-2026-106203] Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote at…
Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.8 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
Hace 3 días
[CVE-2026-106204] Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute a…
Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Alto vulnerabilidad
Hace 3 días
[CVE-2026-106199] Vulnerabilidad Android en Android OS - CVSS 8.2
Vulnerabilidad de seguridad en Android (Android OS): Vulnerabilidad de seguridad en Android. CVSS: 8.2. Afecta dispositivos Android, 80%+ del mercado movil en Mexico y LATAM. Actualiza tu dispositivo en Ajustes - Actualizacion del sistema.
google-androidseguridad-movilandroid-os CVSS 8.2 NVD
G Alto vulnerabilidad
Hace 3 días
[CVE-2026-106205] Vulnerabilidad Android en Android OS - CVSS 8.1
Vulnerabilidad de seguridad en Android (Android OS): Vulnerabilidad de seguridad en Android. CVSS: 8.1. Afecta dispositivos Android, 80%+ del mercado movil en Mexico y LATAM. Actualiza tu dispositivo en Ajustes - Actualizacion del sistema.
google-androidseguridad-movilandroid-os CVSS 8.1 NVD
M Alto vulnerabilidad
Hace 3 días
[CVE-2026-106190] Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute…
Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
Hace 3 días
[CVE-2026-106191] Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who…
Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 8.3 NVD
M Alto vulnerabilidad
Hace 3 días
[CVE-2026-106193] Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execut…
Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
Hace 3 días
[CVE-2026-106194] Missing authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote att…
Missing authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvdaltovulnerabilidad CVSS 8.3 NVD
M Crítico vulnerabilidad
Hace 3 días
[CVE-2026-106197] Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execu…
Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvdcriticovulnerabilidad CVSS 9.6 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
Hace 3 días
[CVE-2026-106186] Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0…
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 8.6 NVD
G Alto vulnerabilidad
Hace 3 días
[CVE-2026-106188] Vulnerabilidad Android en Android System - CVSS 7.1
Vulnerabilidad de seguridad en Android (Android System): Vulnerabilidad de seguridad en Android. CVSS: 7.1. Afecta dispositivos Android, 80%+ del mercado movil en Mexico y LATAM. Actualiza tu dispositivo en Ajustes - Actualizacion del sistema.
google-androidseguridad-movilandroid-system CVSS 7.1 NVD
M Alto vulnerabilidad
Hace 3 días
[CVE-2026-106118] ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, tiled TIFF decoding allocates a destina…
ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, tiled TIFF decoding allocates a destination buffer using TileWidth but TiffDecompressorsFactory.Create constructs T4, T6, and Modified Huffman decompressors using the full frame width. TiffDecoderCore.DecodeTilesChunky can therefore direct frame-width fax scanlines into a tile-width buffer when TileWidth is smaller than ImageWidth. The m…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
Hace 3 días
[CVE-2026-104073] NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allow…
NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal session cookies and API tokens of other users by exposing the raw Django HttpRequest object to the Jinja2 template context. Attackers can craft a custom link template embedding request.COOKIES['sessionid'] or a user's API to…
nvdaltovulnerabilidad CVSS 7.6 NVD
M Crítico vulnerabilidad
Hace 3 días
[CVE-2026-102322] Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote at…
Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
nvdcriticovulnerabilidad CVSS 9.6 NVD