Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
22,093
Total alertas
4671
Críticas
16834
Altas
8
Ransomware
1017
Esta semana
RSS
M Alto vulnerabilidad
09/06/2026
[CVE-2026-44808] Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate priv…
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
M Alto vulnerabilidad
09/06/2026
[CVE-2026-42992] Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code …
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
M Alto vulnerabilidad
09/06/2026
[CVE-2026-42993] Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code …
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
M Alto vulnerabilidad
09/06/2026
[CVE-2026-44799] Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code …
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
M Alto vulnerabilidad
09/06/2026
[CVE-2026-42980] Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elev…
Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.
M Crítico vulnerabilidad
09/06/2026
[CVE-2026-42904] Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges o…
Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network.
M Alto vulnerabilidad
09/06/2026
[CVE-2026-40404] Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
09/06/2026
[CVE-2026-41108] Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privile…
Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally.
M Alto vulnerabilidad
09/06/2026
[CVE-2026-24180] NVIDIA DALI contains a vulnerability in a component where an attacker could cause a heap-based buffe…
NVIDIA DALI contains a vulnerability in a component where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.
A Alto vulnerabilidad
08/06/2026
[CVE-2026-42536] Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and…
Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.
A Alto vulnerabilidad
08/06/2026
[CVE-2026-34355] A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an …
A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.
A Alto vulnerabilidad
08/06/2026
[CVE-2026-34356] Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and Pr…
Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie* This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.
M Alto vulnerabilidad
08/06/2026
[CVE-2026-22164] Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt…
Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory. By creating resources of certain types and presenting a set of parameters to the affected interface the exploit can be used to corrupt kernel memory.
G Alto vulnerabilidad
04/06/2026
[CVE-2026-11124] Integer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potent…
Integer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
G Alto vulnerabilidad
04/06/2026
[CVE-2026-10995] Heap buffer overflow in TabStrip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker w…
Heap buffer overflow in TabStrip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
G Alto vulnerabilidad
04/06/2026
[CVE-2026-10989] Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker…
Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
G Alto vulnerabilidad
04/06/2026
[CVE-2026-10946] Heap buffer overflow in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who …
Heap buffer overflow in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
G Alto vulnerabilidad
04/06/2026
[CVE-2026-10949] Heap buffer overflow in Video in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who …
Heap buffer overflow in Video in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)