Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada ahora mismo

Buscando: "X" — 16355 resultados ✕ Limpiar búsqueda

22,417

Total alertas

4761

Críticas

17025

Altas

8

Ransomware

1263

Esta semana

RSS

M Alto vulnerabilidad

[CVE-2026-102324] Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker…

Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-102326] Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute ar…

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

M Crítico vulnerabilidad

[CVE-2026-102316] Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging…

Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-102317] Improper privilege management in Mojo in Google Chrome on on Windows prior to 154.0.8037.92 allowed …

Improper privilege management in Mojo in Google Chrome on on Windows prior to 154.0.8037.92 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-102302] Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute a…

Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

M Crítico vulnerabilidad

[CVE-2026-102304] Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to exe…

Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

M Crítico vulnerabilidad

[CVE-2026-102306] Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to pot…

Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →

M Crítico vulnerabilidad

[CVE-2026-102308] Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging…

Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

M Crítico vulnerabilidad

[CVE-2026-102309] Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to ex…

Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-102299] Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute ar…

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-102301] Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had…

Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-100292] In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, a hidden debug interface can be enabled through …

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, a hidden debug interface can be enabled through an authenticated request, allowing additional commands to be sent to a backend service. Once active, this pathway can unintentionally expose system‑level functionality that could be misused if crafted inputs reach the underlying command handler.

M Alto vulnerabilidad

[CVE-2026-102827] simple-git, an interface for running git commands in any node.js application, enables applications t…

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior to 4.0.0, the default blockUnsafeOperationsPlugin compares parsed option names with literal dangerous option spellings while Git accepts unambiguous long-option abbreviations. Attacker-influenced push arguments such as abbreviated --receive-pack or --e…

M Alto vulnerabilidad

[CVE-2026-102831] JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jup…

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0 until 4.5.11 and 4.6.4, from Notebook 7.5.0 until 7.6.3, and from JupyterLite Core 0.7.0 until 0.8.4, the system clipboard cell-paste path accepts attacker-controlled cell JSON without clearing metadata.trusted. When useSystemClipboardForCells is act…

M Alto vulnerabilidad

[CVE-2026-102823] Russh is a Rust SSH client and server library. Prior to 0.63.1, client_read_authenticated in russh/s…

Russh is a Rust SSH client and server library. Prior to 0.63.1, client_read_authenticated in russh/src/client/encrypted.rs forwards CHANNEL_DATA, CHANNEL_EXTENDED_DATA, CHANNEL_EOF, CHANNEL_CLOSE, CHANNEL_OPEN_FAILURE, CHANNEL_SUCCESS, CHANNEL_FAILURE, and CHANNEL_REQUEST subtypes exit-status, exit-signal, and xon-xoff to public client::Handler callbacks without confirming that the ChannelId belon…

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →

M Alto vulnerabilidad

[CVE-2026-102826] simple-git, an interface for running git commands in any node.js application, enables applications t…

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior to 4.0.0, the default blockUnsafeOperationsPlugin does not completely reject configuration includes supplied through customArgs to git.clone(). The missing include.path classification permits Git to load an attacker-controlled configuration file, and t…

M Alto vulnerabilidad

[CVE-2026-102616] A vulnerability was detected in risesoft-y9 WorkFlow-Engine up to 9.6.10. Impacted is the function g…

A vulnerability was detected in risesoft-y9 WorkFlow-Engine up to 9.6.10. Impacted is the function getByIdAndYear of the file CustomHistoricProcessServiceImpl.java of the component OAuth2 Resource Filter. Performing a manipulation of the argument year/processInstanceId results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. The sink is in…

M Alto vulnerabilidad

[CVE-2026-95372] Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who h…

Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-95373] Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leverag…

Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

M Alto vulnerabilidad

[CVE-2026-95380] Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging so…

Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

← Anterior 1 … 65 66 67 68 69 … 818 Siguiente →