Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "Microsoft" — 239 resultados ✕ Limpiar búsqueda
13,509
Total alertas
3066
Críticas
10171
Altas
8
Ransomware
1799
Esta semana
RSS
M Alto vulnerabilidad
11/08/2026
[CVE-2026-64908] Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod…
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
M Alto vulnerabilidad
11/08/2026
[CVE-2026-64909] Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execut…
Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.
M Alto vulnerabilidad
11/08/2026
[CVE-2026-63532] Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code l…
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
M Alto vulnerabilidad
11/08/2026
[CVE-2026-63533] Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local…
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
M Alto vulnerabilidad
11/08/2026
[CVE-2026-64898] Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local…
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
M Alto vulnerabilidad
11/08/2026
[CVE-2026-64900] Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of…
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
M Alto vulnerabilidad
11/08/2026
[CVE-2026-64901] Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex…
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
11/08/2026
[CVE-2026-63525] Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code lo…
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.
M Alto vulnerabilidad
11/08/2026
[CVE-2026-63526] Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code loca…
Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
M Alto vulnerabilidad
11/08/2026
[CVE-2026-63527] Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code…
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
M Alto vulnerabilidad
11/08/2026
[CVE-2026-63518] Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code …
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
M Alto vulnerabilidad
11/08/2026
[CVE-2026-63519] Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local…
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
M Alto vulnerabilidad
11/08/2026
[CVE-2026-63520] Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute …
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
M Alto vulnerabilidad
11/08/2026
[CVE-2026-63513] Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local…
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
M Alto vulnerabilidad
11/08/2026
[CVE-2026-63514] Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex…
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
11/08/2026
[CVE-2026-63515] Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
M Alto vulnerabilidad
11/08/2026
[CVE-2026-62911] Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker t…
Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
M Alto vulnerabilidad
11/08/2026
[CVE-2026-62913] Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute cod…
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
M Alto vulnerabilidad
11/08/2026
[CVE-2026-62914] Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ex…
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
M Alto vulnerabilidad
11/08/2026
[CVE-2026-62910] Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows …
Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.