Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI Noticias ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "X" — 16357 resultados ✕ Limpiar búsqueda
22,419
Total alertas
4761
Críticas
17027
Altas
8
Ransomware
1260
Esta semana
RSS
M Alto vulnerabilidad
29/09/2026
[CVE-2026-102521] The decoder in `readFromDataView` in lib0 before 0.2.119 can be tricked into reading more than it sh…
The decoder in `readFromDataView` in lib0 before 0.2.119 can be tricked into reading more than it should from a buffer. The vulnerability allows reading past the decoders' view, thus exposing adjacent process memory. This can be anything that is currently in the head, for example credentials or logs. This is similar to but different from GHSA-r5c8-rf4w-qrq8.
nvdaltovulnerabilidad CVSS 8.6 NVD
M Crítico vulnerabilidad
29/09/2026
[CVE-2026-82973] Improper neutralization of CRLF sequences in IMAP command construction in psyb0t/docker-mailbox befo…
Improper neutralization of CRLF sequences in IMAP command construction in psyb0t/docker-mailbox before 0.4.13 allows a remote unauthenticated attacker, when bearer-token authentication is not configured, to inject additional IMAP commands into an authenticated upstream mailbox connection via crafted folder, UID, or search values.
nvdcriticovulnerabilidad CVSS 9.4 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-82804] The scriptPath parameter is incorporated into a /bin/sh -c command without sufficient neutralization…
The scriptPath parameter is incorporated into a /bin/sh -c command without sufficient neutralization of shell metacharacters, allowing shell command substitution and execution. An authenticated user can exploit this behavior by creating a resource whose filename contains shell command substitution syntax, such as $(...), and subsequently supplying the resulting path to the Alert Script plugin's /…
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-73598] Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrec…
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-102437] OS Command Injection in internal/gitcmd (git diff filter.clean/smudge invocation) in esengine DeepSe…
OS Command Injection in internal/gitcmd (git diff filter.clean/smudge invocation) in esengine DeepSeek-Reasonix (Reasonix Studio) allows a local attacker who controls repository content (.gitattributes + .git/config) to execute arbitrary commands via the desktop app's workspace-changes diff viewer.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-100831] Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Fir…
Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-100832] Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.…
Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Firefox ESR 115.42, and Firefox ESR 140.17.
nvdaltovulnerabilidad CVSS 8.8 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Crítico vulnerabilidad
29/09/2026
[CVE-2026-100818] Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in F…
Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.
nvdcriticovulnerabilidad CVSS 9.6 NVD
M Crítico vulnerabilidad
29/09/2026
[CVE-2026-100819] Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was f…
Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
nvdcriticovulnerabilidad CVSS 9.6 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-100820] Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4…
Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-100824] Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4 and …
Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-100825] Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR …
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Crítico vulnerabilidad
29/09/2026
[CVE-2026-100811] Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed…
Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.
nvdcriticovulnerabilidad CVSS 9.6 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-100813] Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 157…
Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 157.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-100814] Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed …
Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.
nvdaltovulnerabilidad CVSS 8.8 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
29/09/2026
[CVE-2026-100815] Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox…
Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Crítico vulnerabilidad
29/09/2026
[CVE-2026-100800] Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was…
Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.
nvdcriticovulnerabilidad CVSS 9.6 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-100801] Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.…
Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.
nvdaltovulnerabilidad CVSS 8.8 NVD
M Crítico vulnerabilidad
29/09/2026
[CVE-2026-100804] Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was f…
Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Firefox 157.
nvdcriticovulnerabilidad CVSS 9.6 NVD
M Alto vulnerabilidad
29/09/2026
[CVE-2026-100805] Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox…
Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 157.
nvdaltovulnerabilidad CVSS 7.5 NVD