Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada ahora mismo

13,509

Total alertas

3066

Críticas

10171

Altas

8

Ransomware

1810

Esta semana

RSS

cwe-190 × Limpiar todo ×

M Alto vulnerabilidad

[CVE-2026-50347] Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code local…

Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-50306] Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

P Alto vulnerabilidad

[CVE-2026-59197] Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a n…

Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd filter size because ImageFilter.RankFilter.filter() calls image.expand(size // 2, size // 2) before rank-filter size validation and ImagingExpand() computes output dimensions with unchecked signed int arithmetic. This issue is fixed in versi…

M Alto vulnerabilidad

[CVE-2026-55012] Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code…

Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-54109] Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized attacker…

Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.

M Alto vulnerabilidad

[CVE-2026-49800] Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authori…

Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.

P Alto vulnerabilidad

[CVE-2026-59199] Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs can trigger…

Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs can trigger a native heap out-of-bounds write when given coordinates near the signed 32-bit integer limits in Image.paste(), Image.crop(), or Image.alpha_composite(). This issue is fixed in version 12.3.0.

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →

M Crítico vulnerabilidad

[CVE-2026-51536] In OpENer 2.3.0 (commit 76b95cf) when parsing incoming CIP (Common Industrial Protocol) network pack…

In OpENer 2.3.0 (commit 76b95cf) when parsing incoming CIP (Common Industrial Protocol) network packets, the length parameter is inconsistently typed across the call stack. Specifically, an upstream length calculated as an int is passed to a downstream function that expects an EipInt16 (a 16-bit signed integer). If a maliciously crafted packet with specific length fields is processed, the length p…

M Alto vulnerabilidad

[CVE-2026-39042] An issue in MikroTIk (SIA Mikrotikls, Latvia) RouterOS 7.21.x before v.7.21.4 and 7.22.x before v.7.…

An issue in MikroTIk (SIA Mikrotikls, Latvia) RouterOS 7.21.x before v.7.21.4 and 7.22.x before v.7.22.2 allows a remote attacker to cause a denial of service via the unflatten() function in libumsg.so.

P Alto vulnerabilidad

[CVE-2026-57432] Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-boun…

Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack. S_measure_struct adds each item's size times its repeat count to a running total with no overflow check, so a large repeat count in a pack or unpack template wraps the signed SSize_t total negative. The @, X, and x position codes then guard their moves with a signed…

N Crítico vulnerabilidad

[CVE-2026-57433] Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted S…

Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record. retrieve_hook_common reads a signed 32-bit item count from an SX_HOOK record and calls av_extend with that count plus one. A count of I32_MAX wraps the addition to a negative value. A crafted blob passed to thaw or retrieve triggers the overflow; av_extend receives the negative coun…

P Crítico vulnerabilidad

[CVE-2026-13221] Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternati…

Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk. When such branches are combined into a trie, the delta between the first branch and the shared tail is stored in a 16-bit field. A branch count above 65535 overflows the field, and the trie's match decision tab…

F Crítico vulnerabilidad

[CVE-2026-40469] Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine)…

Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects 32-bit builds of gawk in versions 5.4.0 and below.

F Crítico vulnerabilidad

[CVE-2026-40468] Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may le…

Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.

M Alto vulnerabilidad

[CVE-2026-7162] Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve sys…

Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected software.

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →

F Crítico vulnerabilidad

[CVE-2026-57156] FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0 on 32-bit builds, F…

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0 on 32-bit builds, FreeRDP clients contain an integer overflow in update_read_delta_points in libfreerdp/core/orders.c when multiplying an attacker-controlled point count by sizeof(DELTA_POINT), allowing a malicious RDP peer to allocate an undersized heap buffer and then write beyond it during initialization. This issu…

M Alto vulnerabilidad

[CVE-2026-38076] An integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows attac…

An integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows attackers to cause a Denial of Service (DoS) via a crafted input.

L Alto vulnerabilidad

[CVE-2026-58207] NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Pr…

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, a client able to send account-scoped connection monitoring requests could crash the server by supplying Connz pagination Offset and Limit values that overflowed internal arithmetic before the response window was safely bounded. This issue is fixed in versions 2.14.3 and 2.…

I Alto vulnerabilidad

[CVE-2026-59879] Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, List#set,…

Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, List#set, List#setSize, List#setIn, List#updateIn, and the functional set, setIn, and updateIn mishandle an index or size in the range 2 ** 30 to 2 ** 31 in setListBounds in src/List.js, causing an empty List to enter an uncatchable infinite loop, a populated List to allocate without bound until process abor…

D Alto vulnerabilidad

[CVE-2026-53482] Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through…

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an Integer overflow or wraparound vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.

← Anterior 1 … 4 5 6 7 8 9 Siguiente →