Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "Linux" — 1677 resultados ✕ Limpiar búsqueda
22,093
Total alertas
4671
Críticas
16834
Altas
8
Ransomware
1012
Esta semana
RSS
L Alto vulnerabilidad
08/06/2026
[CVE-2026-46288] In the Linux kernel, the following vulnerability has been resolved: of: unittest: fix use-after-fre…
In the Linux kernel, the following vulnerability has been resolved: of: unittest: fix use-after-free in of_unittest_changeset() The variable 'parent' is assigned the value of 'nchangeset' earlier in the function, meaning both point to the same struct device_node. The call to of_node_put(nchangeset) can decrement the reference count to zero and free the node if there are no other holders. After t…
nvdaltovulnerabilidad CVSS 8.4 NVD
L Alto vulnerabilidad
08/06/2026
[CVE-2026-46277] In the Linux kernel, the following vulnerability has been resolved: mm/zone_device: do not touch de…
In the Linux kernel, the following vulnerability has been resolved: mm/zone_device: do not touch device folio after calling ->folio_free() The contents of a device folio can immediately change after calling ->folio_free(), as the folio may be reallocated by a driver with a different order. Instead of touching the folio again to extract the pgmap, use the local stack variable when calling percpu…
nvdaltovulnerabilidad CVSS 7.8 NVD
L Alto vulnerabilidad
08/06/2026
[CVE-2026-46279] In the Linux kernel, the following vulnerability has been resolved: mm/alloc_tag: clear codetag for…
In the Linux kernel, the following vulnerability has been resolved: mm/alloc_tag: clear codetag for pages allocated before page_ext initialization Due to initialization ordering, page_ext is allocated and initialized relatively late during boot. Some pages have already been allocated and freed before page_ext becomes available, leaving their codetag uninitialized. A clear example is in init_se…
nvdaltovulnerabilidad CVSS 7.8 NVD
L Alto vulnerabilidad
08/06/2026
[CVE-2026-46280] In the Linux kernel, the following vulnerability has been resolved: lib: test_hmm: evict device pag…
In the Linux kernel, the following vulnerability has been resolved: lib: test_hmm: evict device pages on file close to avoid use-after-free Patch series "Minor hmm_test fixes and cleanups". Two bugfixes a cleanup for the HMM kernel selftests. These were mostly reported by Zenghui Yu with special thanks to Lorenzo for analysing and pointing out the problems. This patch (of 3): When dmirror_f…
nvdaltovulnerabilidad CVSS 7.8 NVD
L Alto vulnerabilidad
08/06/2026
[CVE-2026-46281] In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix buffer overflow in…
In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix buffer overflow in vrealloc_node_align() Commit 4c5d3365882d ("mm/vmalloc: allow to set node and align in vrealloc") added the ability to force a new allocation if the current pointer is on the wrong NUMA node, or if an alignment constraint is not met, even if the user is shrinking the allocation. On this path (nee…
nvdaltovulnerabilidad CVSS 7.8 NVD
L Alto vulnerabilidad
08/06/2026
[CVE-2026-46274] In the Linux kernel, the following vulnerability has been resolved: io-wq: check that the predecess…
In the Linux kernel, the following vulnerability has been resolved: io-wq: check that the predecessor is hashed in io_wq_remove_pending() io_wq_remove_pending() needs to fix up wq->hash_tail[] if the cancelled work was the tail of its hash bucket. When doing this, it checks whether the preceding entry in acct->work_list has the same hash value, but never checks that the predecessor is hashed at …
nvdaltovulnerabilidad CVSS 7.8 NVD
L Alto vulnerabilidad
08/06/2026
[CVE-2026-46275] In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix UAFs a…
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths Vulnerabilities leading to Use-After-Free (UAF) and Null Pointer Dereference (NPD) conditions were observed in the lifecycle management of hci_uart. The primary issue arises because the workqueues (init_ready and write_work) are only flushed/cancelled if …
nvdaltovulnerabilidad CVSS 7.8 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
G Alto vulnerabilidad
05/06/2026
[CVE-2026-11303] Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execut…
Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Alto vulnerabilidad
05/06/2026
[CVE-2026-11304] Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potent…
Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Alto vulnerabilidad
05/06/2026
[CVE-2026-11305] Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execut…
Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Alto vulnerabilidad
05/06/2026
[CVE-2026-11306] Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execut…
Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Alto vulnerabilidad
05/06/2026
[CVE-2026-11307] Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execut…
Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Alto vulnerabilidad
05/06/2026
[CVE-2026-11296] Inappropriate implementation in ImageCapture in Google Chrome prior to 149.0.7827.53 allowed a remot…
Inappropriate implementation in ImageCapture in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 7.5 NVD
G Alto vulnerabilidad
05/06/2026
[CVE-2026-11301] Inappropriate implementation in LiveCaption in Google Chrome prior to 149.0.7827.53 allowed a remote…
Inappropriate implementation in LiveCaption in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via malicious network traffic. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Crítico vulnerabilidad
05/06/2026
[CVE-2026-11293] Use after free in Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potenti…
Use after free in Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
nvdcriticovulnerabilidad CVSS 9.6 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
G Alto vulnerabilidad
05/06/2026
[CVE-2026-11279] Out of bounds read in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to …
Out of bounds read in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 8.8 NVD
G Crítico vulnerabilidad
05/06/2026
[CVE-2026-11282] Insufficient policy enforcement in Sandbox in Google Chrome on Linux prior to 149.0.7827.53 allowed …
Insufficient policy enforcement in Sandbox in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
nvdcriticovulnerabilidad CVSS 9.6 NVD
G Alto vulnerabilidad
05/06/2026
[CVE-2026-11265] Inappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote at…
Inappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 7.5 NVD
G Alto vulnerabilidad
05/06/2026
[CVE-2026-11269] Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attack…
Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker in a privileged network position to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 7.1 NVD
G Alto vulnerabilidad
05/06/2026
[CVE-2026-11255] Insufficient validation of untrusted input in Storage Access API in Google Chrome prior to 149.0.782…
Insufficient validation of untrusted input in Storage Access API in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
nvdaltovulnerabilidad CVSS 7.5 NVD