Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada hace 1 hora

Buscando: "Linux" — 1677 resultados ✕ Limpiar búsqueda

22,162

Total alertas

4698

Críticas

16876

Altas

8

Ransomware

1037

Esta semana

RSS

G Alto vulnerabilidad

[CVE-2026-13821] Use after free in Canvas in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execut…

Use after free in Canvas in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

G Alto vulnerabilidad

[CVE-2026-13811] Use after free in IME in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute a…

Use after free in IME in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

G Crítico vulnerabilidad

[CVE-2026-13796] Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who…

Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Crítico vulnerabilidad

[CVE-2026-13797] Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.47 all…

Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Crítico vulnerabilidad

[CVE-2026-13798] Heap buffer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker…

Heap buffer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

G Alto vulnerabilidad

[CVE-2026-13799] Use after free in QUIC in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentia…

Use after free in QUIC in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via malicious network traffic. (Chromium security severity: High)

G Alto vulnerabilidad

[CVE-2026-13801] Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who…

Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →

G Crítico vulnerabilidad

[CVE-2026-13782] Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had …

Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

G Alto vulnerabilidad

[CVE-2026-13783] Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convin…

Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

G Alto vulnerabilidad

[CVE-2026-13784] Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convin…

Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

G Alto vulnerabilidad

[CVE-2026-13791] Insufficient validation of untrusted input in Downloads in Google Chrome prior to 150.0.7871.47 allo…

Insufficient validation of untrusted input in Downloads in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: High)

G Alto vulnerabilidad

[CVE-2026-13774] Use after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinc…

Use after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: Critical)

G Crítico vulnerabilidad

[CVE-2026-13775] Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had comp…

Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

G Crítico vulnerabilidad

[CVE-2026-13776] Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had com…

Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

G Alto vulnerabilidad

[CVE-2026-13777] Insufficient validation of untrusted input in iOSWeb in Google Chrome on iOS prior to 150.0.7871.47 …

Insufficient validation of untrusted input in iOSWeb in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →

G Crítico vulnerabilidad

[CVE-2026-13780] Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed …

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

G Crítico vulnerabilidad

[CVE-2026-13781] Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.47 allowed a…

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

A Crítico vulnerabilidad

[CVE-2026-48286] Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected by an Incorrect Auth…

Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.

M Alto vulnerabilidad

[CVE-2026-58302] rtapi_app in linuxcnc-uspace in LinuxCNC before 2.9.9 allows privilege escalation. It is installed S…

rtapi_app in linuxcnc-uspace in LinuxCNC before 2.9.9 allows privilege escalation. It is installed SUID root and loads shared library modules via dlopen() by using a user-supplied module name. Insufficient validation of the module name allows path traversal, enabling an unprivileged local user to load an arbitrary shared library. Because the process retains elevated privileges during module loadin…

F Alto vulnerabilidad

[CVE-2026-49413] The Linuxulator determined whether a binary was set-user-ID or set-group-ID by checking the P_SUGID …

The Linuxulator determined whether a binary was set-user-ID or set-group-ID by checking the P_SUGID process flag. During execve(2), this flag is not yet set at the point where the auxiliary vector is constructed, so AT_SECURE was incorrectly set to zero for set-user-ID and set-group-ID executables. An unprivileged local user can inject a shared library via LD_PRELOAD into a set-user-ID or set-gr…

← Anterior 1 … 55 56 57 58 59 … 84 Siguiente →