Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada ahora mismo

13,434

Total alertas

3054

Críticas

10108

Altas

8

Ransomware

1771

Esta semana

RSS

cwe-428 × Limpiar todo ×

M Alto vulnerabilidad

Vulnerabilidad alta de secuestro DLL en GeoVision GV-ASManager permite ejecución de código arbitrario

GeoVision GV-ASManager presenta una vulnerabilidad de secuestro de librerías dinámicas (DLL hijacking) que permite a un atacante local con acceso de escritura ejecutar código arbitrario bajo los privilegios del proceso vulnerable. La amenaza es significativa en instalaciones de videovigilancia y sistemas de control de acceso en México y Latinoamérica, donde GV-ASManager es ampliamente deployado en infraestructura alta, retail y empresarial.

M Alto vulnerabilidad

[CVE-2020-37252] Realtek Audio Service 1.0.0.55 contains an unquoted service path vulnerability in RtkAudioService64.…

Realtek Audio Service 1.0.0.55 contains an unquoted service path vulnerability in RtkAudioService64.exe that allows local attackers to escalate privileges by injecting malicious code. Attackers can place executable files in the unquoted service path directory to execute arbitrary code with LocalSystem privileges during service startup or system reboot.

M Alto vulnerabilidad

[CVE-2020-37253] Winstep 18.06.0096 contains an unquoted service path vulnerability in the Winstep Xtreme Service tha…

Winstep 18.06.0096 contains an unquoted service path vulnerability in the Winstep Xtreme Service that allows local attackers to escalate privileges. Attackers can place malicious executables in the Program Files directory to be executed with LocalSystem privileges when the service starts.

M Alto vulnerabilidad

[CVE-2020-37254] Wondershare PDFelement 5.2.9 contains a privilege escalation vulnerability due to an unquoted servic…

Wondershare PDFelement 5.2.9 contains a privilege escalation vulnerability due to an unquoted service path in the WsAppService Windows service. Local attackers can place a malicious executable in the service path and execute code with LocalSystem privileges upon service restart or system reboot.

M Alto vulnerabilidad

[CVE-2021-47985] Brother SAPSprint 7.60 contains an unquoted service path vulnerability in the SAPSprint service bina…

Brother SAPSprint 7.60 contains an unquoted service path vulnerability in the SAPSprint service binary that allows local attackers to escalate privileges. Attackers can place a malicious executable in the Program Files directory path to be executed with LocalSystem privileges when the service starts automatically.

M Alto vulnerabilidad

[CVE-2022-50971] Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService executable that …

Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService executable that allows local attackers to escalate privileges by injecting malicious code into the system root path. Attackers can place executable files in unquoted path directories that execute with LocalSystem privileges during service startup or system reboot.

M Alto vulnerabilidad

[CVE-2023-54353] Chromacam 4.0.3.0 contains an unquoted service path vulnerability in the PsyFrameGrabberService that…

Chromacam 4.0.3.0 contains an unquoted service path vulnerability in the PsyFrameGrabberService that allows local attackers to execute arbitrary code by placing malicious executables in unquoted path directories. Attackers with write access to C:\ or subdirectories like C:\Program Files (x86)\Personify\ can place a malicious Program.exe or PsyFrameGrabberService.exe file that executes with LocalSy…

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →

M Alto vulnerabilidad

[CVE-2025-71326] AVAST Antivirus 25.11 contains an unquoted service path vulnerability in the SecureLine service that…

AVAST Antivirus 25.11 contains an unquoted service path vulnerability in the SecureLine service that allows local non-privileged users to execute code with elevated SYSTEM privileges. Attackers can exploit the unquoted binary path in the service configuration to inject malicious executables that execute with high-level system permissions.

M Alto vulnerabilidad

[CVE-2016-20092] NetDrive 2.6.12 contains an unquoted service path vulnerability in the Netdrive2_Service_Netdrive2 s…

NetDrive 2.6.12 contains an unquoted service path vulnerability in the Netdrive2_Service_Netdrive2 service that allows local users to execute arbitrary code with SYSTEM privileges. Attackers can insert malicious executables in the system root path that will be executed during service startup or system reboot, resulting in privilege escalation.

M Alto vulnerabilidad

[CVE-2016-20093] Wise Care 365 4.27 and Wise Disk Cleaner 9.29 contain unquoted service path vulnerabilities in the W…

Wise Care 365 4.27 and Wise Disk Cleaner 9.29 contain unquoted service path vulnerabilities in the WiseBootAssistant and SpyHunter 4 Service respectively, allowing local users to execute arbitrary code with SYSTEM privileges. Attackers can insert malicious executables in the system root path that execute during service startup or system reboot with elevated privileges.

A Alto vulnerabilidad

[CVE-2016-20094] AnyDesk 2.5.0 contains an unquoted service path vulnerability that allows local users to execute arb…

AnyDesk 2.5.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with SYSTEM privileges by exploiting the service installation. Attackers can insert malicious executables in the system root path that execute with elevated privileges during application startup or system reboot.

M Alto vulnerabilidad

[CVE-2016-20095] Matrix42 Remote Control Host 3.20.0031 contains an unquoted service path vulnerability in the FastVi…

Matrix42 Remote Control Host 3.20.0031 contains an unquoted service path vulnerability in the FastViewerRemoteService and FastViewerRemoteProxy services that allows local users to execute arbitrary code with SYSTEM privileges. Attackers can place a malicious executable in the Program Files directory with a crafted name to be executed by the service during startup, gaining elevated privileges.

M Alto vulnerabilidad

[CVE-2019-25747] Network Inventory Advisor 5.0.26.0 installs the niaservice service with an unquoted binary path that…

Network Inventory Advisor 5.0.26.0 installs the niaservice service with an unquoted binary path that allows local attackers to escalate privileges by placing malicious executables in intermediate directories. Attackers can exploit the unquoted path in the service configuration to execute arbitrary code with LocalSystem privileges when the service starts or restarts.

M Alto vulnerabilidad

[CVE-2020-37250] TFTP Broadband 4.3.0.1465 contains an unquoted service path vulnerability in the tftpt.exe service b…

TFTP Broadband 4.3.0.1465 contains an unquoted service path vulnerability in the tftpt.exe service binary that allows local attackers to execute arbitrary code with system privileges. Attackers can place a malicious executable in the Program Files directory path that will be executed during service startup or system reboot with LocalSystem privileges.

M Alto vulnerabilidad

[CVE-2020-37251] RealTimes Desktop Service 18.1.4 contains an unquoted service path vulnerability in the rpdsvc.exe b…

RealTimes Desktop Service 18.1.4 contains an unquoted service path vulnerability in the rpdsvc.exe binary that allows local attackers to escalate privileges. Attackers can place malicious executables in unquoted path directories to execute arbitrary code with LocalSystem privileges during service startup or system reboot.

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →

M Alto vulnerabilidad

[CVE-2016-20086] Vembu StoreGrid 4.0 contains an unquoted service path vulnerability in the RemoteBackup and RemoteBa…

Vembu StoreGrid 4.0 contains an unquoted service path vulnerability in the RemoteBackup and RemoteBackup_webServer services that allows local attackers to escalate privileges. Attackers can place a malicious executable in the unquoted path and restart the service to execute code with LocalSystem privileges.

M Alto vulnerabilidad

[CVE-2016-20087] Fortitude HTTP 1.0.4.0 contains an unquoted service path vulnerability that allows local users to ex…

Fortitude HTTP 1.0.4.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated privileges by exploiting the service binary path. Attackers can insert malicious executables in the system root path that execute with SYSTEM privileges during service startup or system reboot.

M Alto vulnerabilidad

[CVE-2016-20088] Comodo Chromodo Browser 52.15.25.664 contains an unquoted service path vulnerability in the Chromodo…

Comodo Chromodo Browser 52.15.25.664 contains an unquoted service path vulnerability in the ChromodoUpdater service that runs with SYSTEM privileges. A local attacker can insert a malicious executable in the service path and execute arbitrary code with elevated privileges upon service restart or system reboot.

M Alto vulnerabilidad

[CVE-2016-20089] Iperius Remote 1.7.0 contains an unquoted service path vulnerability that allows local users to exec…

Iperius Remote 1.7.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with SYSTEM privileges by exploiting the service installation path. When installed from directories containing spaces, attackers can place malicious executables in the path to be executed with elevated privileges during service startup or system reboot.

M Alto vulnerabilidad

[CVE-2016-20090] Comodo Dragon Browser versions up to 52.15.25.663 contain a privilege escalation vulnerability in th…

Comodo Dragon Browser versions up to 52.15.25.663 contain a privilege escalation vulnerability in the DragonUpdater service due to an unquoted service path running with SYSTEM privileges. A local attacker can insert a malicious executable in the service path and execute arbitrary code with elevated privileges upon service restart or system reboot.

1 2 Siguiente →