Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →

Última alerta publicada hace 1 hora

22,093

Total alertas

4671

Críticas

16834

Altas

8

Ransomware

1003

Esta semana

RSS

exchange server × Limpiar todo ×

M Alto vulnerabilidad

[CVE-2026-55005] Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute cod…

Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

M Alto vulnerabilidad

[CVE-2026-55006] Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacke…

Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

M Crítico vulnerabilidad

[CVE-2026-55008] Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ex…

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

M Alto vulnerabilidad

[CVE-2026-55009] Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elev…

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

M Alto vulnerabilidad

[CVE-2026-47631] Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ex…

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

M Alto vulnerabilidad

[CVE-2026-45503] Improper authorization in Microsoft Exchange Server allows an authorized attacker to disclose inform…

Improper authorization in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.

M Alto vulnerabilidad

[CVE-2026-45504] Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to ele…

Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →

M Alto vulnerabilidad

[CVE-2026-45583] Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an una…

Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.