Alertas de Seguridad de la Información

F Alto vulnerabilidad

09/06/2026

[CVE-2026-49842] FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary …

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, mod_verto's WebSocket frame loop intercepts a #-prefixed speed-test protocol (#SPU / #SPB / #SPE) before any authentication check. The declared payload size in #SPU was parsed with atoi() and …

nvdaltovulnerabilidad CVSS 7.5 NVD

F Alto vulnerabilidad

09/06/2026

[CVE-2026-49847] FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary …

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, a single unauthenticated WebSocket frame containing a deeply nested JSON document crashes the FreeSWITCH process via stack overflow, terminating all calls and sessions on the host. The recursi…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-49161] Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security f…

Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally.

nvdaltovulnerabilidad CVSS 7.8 NVD

F Alto vulnerabilidad

09/06/2026

[CVE-2026-49475] FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary …

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.0, a STUN packet whose declared attribute length is shorter than the structure the parser casts to causes the parser to read and write past the end of the attribute, producing an out-of-bounds me…

nvdaltovulnerabilidad CVSS 7.5 NVD

F Crítico vulnerabilidad

09/06/2026

[CVE-2026-49840] FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary …

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, esl_recv_event() parses Content-Length with atol() and passes the result straight to malloc(len + 1) with no sign or magnitude check. A malicious or man-in-the-middle ESL peer can send a frame…

nvdcriticovulnerabilidad CVSS 9.1 NVD

F Crítico vulnerabilidad

09/06/2026

[CVE-2026-49841] FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary …

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, the mod_verto HTTP request handler allocates a fixed 2 MiB buffer for a POST application/x-www-form-urlencoded body but accepts Content-Length up to just under 10 MiB. The body-read loop is bo…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-48574] Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-48575] Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a securi…

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

nvdaltovulnerabilidad CVSS 7.9 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-48576] No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feat…

No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

nvdaltovulnerabilidad CVSS 7.9 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-48578] Improper access control in Windows Secure Boot allows an authorized attacker to elevate privileges l…

Improper access control in Windows Secure Boot allows an authorized attacker to elevate privileges locally.

nvdaltovulnerabilidad CVSS 7.9 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-48583] Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-49160] Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a n…

Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a network.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-48565] Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privilege…

Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-48568] Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a securi…

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

nvdaltovulnerabilidad CVSS 7.9 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-48569] Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security…

Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-48570] Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a securi…

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

nvdaltovulnerabilidad CVSS 7.9 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-48573] No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feat…

No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

nvdaltovulnerabilidad CVSS 7.9 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-48563] Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo…

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

09/06/2026

[CVE-2026-47656] Protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a secur…

Protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature locally.

nvdaltovulnerabilidad CVSS 7.9 NVD

M Crítico vulnerabilidad

09/06/2026

[CVE-2026-47643] External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute…

External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network.

nvdcriticovulnerabilidad CVSS 9.8 NVD