Alertas de Seguridad de la Información

S Alto vulnerabilidad

03/06/2026

[CVE-2026-8876] Version 3.0.7 of the Securly Chrome Extension contains hardcoded, plaintext AES passphrases in secur…

Version 3.0.7 of the Securly Chrome Extension contains hardcoded, plaintext AES passphrases in securly.min.js. These keys decrypt crisis alert keyword data and intervention site data.

nvdaltovulnerabilidad CVSS 7.3 NVD

S Alto vulnerabilidad

03/06/2026

[CVE-2026-8878] Version 3.0.7 of the Securly Chrome Extension exposes multiple publicly accessible endpoints that al…

Version 3.0.7 of the Securly Chrome Extension exposes multiple publicly accessible endpoints that allow unauthenticated access to sensitive data. The exposed information consists of SHA-1 hashes that are inadequately obfuscated using a simple Caesar cipher, which can be easily reversed to recover the original hash values and access the protected data.

nvdaltovulnerabilidad CVSS 7.5 NVD

S Alto vulnerabilidad

03/06/2026

[CVE-2026-8879] Version 3.0.7 of the Securly Chrome Extension dynamically registers content13.min.js as a content sc…

Version 3.0.7 of the Securly Chrome Extension dynamically registers content13.min.js as a content script via chrome.scripting.registerContentScripts() at runtime. This script is NOT declared in manifest.json and bypasses Chrome Web Store static security review. It runs on all URLs and immediately hides all page content, creates a full-page overlay, pauses all videos, and only restores content when…

nvdaltovulnerabilidad CVSS 7.5 NVD

S Alto vulnerabilidad

03/06/2026

[CVE-2026-8881] Version 3.0.7 of the Securly Chrome Extension uses EVP_BytesToKey key derivation with MD5 and a sing…

Version 3.0.7 of the Securly Chrome Extension uses EVP_BytesToKey key derivation with MD5 and a single iteration for AES encryption. MD5 has been broken since 2004 and a single iteration provides no key stretching.

nvdaltovulnerabilidad CVSS 7.5 NVD

S Alto vulnerabilidad

03/06/2026

[CVE-2026-8888] Version 3.0.7 of the Securly Chrome Extension downloads config.json over HTTP and compiles server-pr…

Version 3.0.7 of the Securly Chrome Extension downloads config.json over HTTP and compiles server-provided patterns as JavaScript regular expressions via new RegExp() without complexity validation. An on-path attacker can inject specific patterns to cause catastrophic backtracking, resulting in denial of service on all browsing.

nvdaltovulnerabilidad CVSS 7.5 NVD

S Alto vulnerabilidad

03/06/2026

[CVE-2026-8889] Version 3.0.7 of the Securly Chrome Extension uses deprecated SHA-1 hashing for IWF CSAM URL matchin…

Version 3.0.7 of the Securly Chrome Extension uses deprecated SHA-1 hashing for IWF CSAM URL matching (25,020 hashes) and CIPA blocklist matching (12,352 hashes).

nvdaltovulnerabilidad CVSS 7.5 NVD

L Alto vulnerabilidad

03/06/2026

[CVE-2026-46273] In the Linux kernel, the following vulnerability has been resolved: ibmveth: Disable GSO for packet…

In the Linux kernel, the following vulnerability has been resolved: ibmveth: Disable GSO for packets with small MSS Some physical adapters on Power systems do not support segmentation offload when the MSS is less than 224 bytes. Attempting to send such packets causes the adapter to freeze, stopping all traffic until manually reset. Implement ndo_features_check to disable GSO for packets with sm…

nvdaltovulnerabilidad CVSS 8.6 NVD

L Alto vulnerabilidad

03/06/2026

[CVE-2026-46265] In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix WQ_MEM_RECLAIM wa…

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix WQ_MEM_RECLAIM warning When sunrpc is used, if a reset triggered, our wq may lead the following trace: workqueue: WQ_MEM_RECLAIM xprtiod:xprt_rdma_connect_worker [rpcrdma] is flushing !WQ_MEM_RECLAIM hns_roce_irq_workq:flush_work_handle [hns_roce_hw_v2] WARNING: CPU: 0 PID: 8250 at kernel/workqueue.c:2644 check_fl…

nvdaltovulnerabilidad CVSS 7.5 NVD

L Crítico vulnerabilidad

03/06/2026

[CVE-2026-46266] In the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTO…

In the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP Yizhou Zhao reported that simply having one RAW socket on protocol IPPROTO_RAW (255) was dangerous. socket(AF_INET, SOCK_RAW, 255); A malicious incoming ICMP packet can set the protocol field to 255 and match this socket, leading to FNHE cache changes. inner = IP(s…

nvdcriticovulnerabilidad CVSS 9.1 NVD

L Alto vulnerabilidad

03/06/2026

[CVE-2026-46267] In the Linux kernel, the following vulnerability has been resolved: nfc: hci: shdlc: Stop timers an…

In the Linux kernel, the following vulnerability has been resolved: nfc: hci: shdlc: Stop timers and work before freeing context llc_shdlc_deinit() purges SHDLC skb queues and frees the llc_shdlc structure while its timers and state machine work may still be active. Timer callbacks can schedule sm_work, and sm_work accesses SHDLC state and the skb queues. If teardown happens in parallel with a …

nvdaltovulnerabilidad CVSS 7.8 NVD

L Alto vulnerabilidad

03/06/2026

[CVE-2026-46270] In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: Fix use-…

In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: Fix use-after-free in power_supply_changed() Using the `devm_` variant for requesting IRQ _before_ the `devm_` variant for allocating/registering the `power_supply` handle, means that the `power_supply` handle will be deallocated/unregistered _before_ the interrupt handler (since `devm_` naturally dealloca…

nvdaltovulnerabilidad CVSS 8.4 NVD

L Alto vulnerabilidad

03/06/2026

[CVE-2026-46271] In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: do WoW offloads o…

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: do WoW offloads only on primary link In case of multi-link connection, WCN7850 firmware crashes due to WoW offloads enabled on both primary and secondary links. Change to do it only on primary link to fix it. Tested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1

nvdaltovulnerabilidad CVSS 7.8 NVD

L Alto vulnerabilidad

03/06/2026

[CVE-2026-46260] In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bound access i…

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bound access in fib6_add_rt2node(). syzbot reported out-of-bound read in fib6_add_rt2node(). [0] When IPv6 route is created with RTA_NH_ID, struct fib6_info does not have the trailing struct fib6_nh. The cited commit started to check !iter->fib6_nh->fib_nh_gw_family to ensure that rt6_qualify_for_ecmp() will r…

nvdaltovulnerabilidad CVSS 7.8 NVD

L Alto vulnerabilidad

03/06/2026

[CVE-2026-46263] In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bou…

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds stream encoder index v3 eng_id can be negative and that stream_enc_regs[] can be indexed out of bounds. eng_id is used directly as an index into stream_enc_regs[], which has only 5 entries. When eng_id is 5 (ENGINE_ID_DIGF) or negative, this can access memory past the end of the array. Add a …

nvdaltovulnerabilidad CVSS 7.8 NVD

L Alto vulnerabilidad

03/06/2026

[CVE-2026-46264] In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Fix sysfs initializa…

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Fix sysfs initialization In case of devm_add_action_or_reset() failure the provided cleanup action will be run immediately on the not yet initialized kobject. This may lead to errors like: [ ] kobject: '(null)' (ff110001393608e0): is not initialized, yet kobject_put() is being called. [ ] WARNING: lib/kobject.c:734…

nvdaltovulnerabilidad CVSS 8.8 NVD

L Alto vulnerabilidad

03/06/2026

[CVE-2026-46253] In the Linux kernel, the following vulnerability has been resolved: pstore/ram: fix buffer overflow…

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: fix buffer overflow in persistent_ram_save_old() persistent_ram_save_old() can be called multiple times for the same persistent_ram_zone (e.g., via ramoops_pstore_read -> ramoops_get_next_prz for PSTORE_TYPE_DMESG records). Currently, the function only allocates prz->old_log when it is NULL, but it unconditionally u…

nvdaltovulnerabilidad CVSS 7.8 NVD

L Alto vulnerabilidad

03/06/2026

[CVE-2026-46259] In the Linux kernel, the following vulnerability has been resolved: procfs: fix missing RCU protect…

In the Linux kernel, the following vulnerability has been resolved: procfs: fix missing RCU protection when reading real_parent in do_task_stat() When reading /proc/[pid]/stat, do_task_stat() accesses task->real_parent without proper RCU protection, which leads to: cpu 0 cpu 1 ----- ----- do_task_stat var = task->real_parent …

nvdaltovulnerabilidad CVSS 7.8 NVD

L Alto vulnerabilidad

03/06/2026

[CVE-2026-46250] In the Linux kernel, the following vulnerability has been resolved: MIPS: Work around LLVM bug when…

In the Linux kernel, the following vulnerability has been resolved: MIPS: Work around LLVM bug when gp is used as global register variable On MIPS, __current_thread_info is defined as global register variable locating in $gp, and is simply assigned with new address during kernel relocation. This however is broken with LLVM, which always restores $gp if it finds $gp is clobbered in any form, inc…

nvdaltovulnerabilidad CVSS 7.3 NVD

L Alto vulnerabilidad

03/06/2026

[CVE-2026-46251] In the Linux kernel, the following vulnerability has been resolved: btrfs: fix block_group_tree dir…

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix block_group_tree dirty_list corruption When the incompat flag EXTENT_TREE_V2 is set, we unconditionally add the block group tree to the switch_commits list before calling switch_commit_roots, as we do for the tree root and the chunk root. However, the block group tree uses normal root dirty tracking and in any transac…

nvdaltovulnerabilidad CVSS 8.4 NVD

L Crítico vulnerabilidad

03/06/2026

[CVE-2026-46244] In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: Fix IPv6 …

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: Fix IPv6 inner_thoff desync In nft_inner_parse_l2l3(), when processing inner IPv6 packets, ipv6_find_hdr() correctly computes the transport header offset traversing all extension headers, but the result is immediately overwritten with nhoff + sizeof(_ip6h) (40 bytes), which only accounts for the IPv6 base h…

nvdcriticovulnerabilidad CVSS 9.1 NVD