Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
13,598
Total alertas
3086
Críticas
10240
Altas
8
Ransomware
1809
Esta semana
RSS
A Alto vulnerabilidad
09/06/2026
[CVE-2026-47921] Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vuln…
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
A Crítico vulnerabilidad
09/06/2026
[CVE-2026-47928] ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnera…
ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.
A Alto vulnerabilidad
09/06/2026
[CVE-2026-47929] ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerabi…
ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could exploit this vulnerability to gain elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.
A Alto vulnerabilidad
09/06/2026
[CVE-2026-47930] ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnera…
ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user interaction.
A Alto vulnerabilidad
09/06/2026
[CVE-2026-47913] Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vuln…
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
A Alto vulnerabilidad
09/06/2026
[CVE-2026-47914] Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vuln…
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
A Alto vulnerabilidad
09/06/2026
[CVE-2026-47915] Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vuln…
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
A Alto vulnerabilidad
09/06/2026
[CVE-2026-47916] Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vuln…
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
A Alto vulnerabilidad
09/06/2026
[CVE-2026-47917] Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vuln…
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
A Alto vulnerabilidad
09/06/2026
[CVE-2026-47918] Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vuln…
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
A Alto vulnerabilidad
09/06/2026
[CVE-2026-47919] Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vuln…
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
A Alto vulnerabilidad
09/06/2026
[CVE-2026-47920] Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vuln…
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
A Alto vulnerabilidad
09/06/2026
[CVE-2026-47911] Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds writ…
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
A Alto vulnerabilidad
09/06/2026
[CVE-2026-47912] Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vuln…
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
I Alto vulnerabilidad
09/06/2026
[CVE-2025-71319] image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to …
image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-valued size field in a recognized box-type. Attackers can trigger an infinite loop in the JXL or HEIF image parsers by providing a crafted image containing a box with a size of zero, causing the offset…

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
09/06/2026
[CVE-2026-11799] UXSS in Focus for iOS / Klar Webkit navigation. This vulnerability was fixed in Focus for iOS 151.3.…
UXSS in Focus for iOS / Klar Webkit navigation. This vulnerability was fixed in Focus for iOS 151.3.1 and Klar for iOS 151.3.1.
A Alto vulnerabilidad
09/06/2026
[CVE-2026-48306] Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerabilit…
Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
A Alto vulnerabilidad
09/06/2026
[CVE-2026-48305] Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerabilit…
Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
A Alto vulnerabilidad
09/06/2026
[CVE-2026-47906] Dreamweaver Desktop versions 21.7 and earlier are affected by a Dependency on Vulnerable Third-Party…
Dreamweaver Desktop versions 21.7 and earlier are affected by a Dependency on Vulnerable Third-Party Component vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
A Alto vulnerabilidad
09/06/2026
[CVE-2026-47907] Dreamweaver Desktop versions 21.7 and earlier are affected by an Improper Access Control vulnerabili…
Dreamweaver Desktop versions 21.7 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.