{"id":332489,"date":"2024-05-16T14:38:08","date_gmt":"2024-05-16T12:38:08","guid":{"rendered":"https:\/\/sftarticles.wpenginepowered.com\/es\/?p=332489"},"modified":"2024-08-08T18:32:53","modified_gmt":"2024-08-08T16:32:53","slug":"microsoft-corrige-61-fallos-de-seguridad-en-su-ultima-gran-actualizacion-incluyendo-dos-graves-vulnerabilidades-de-dia-cero","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/es\/microsoft-corrige-61-fallos-de-seguridad-en-su-ultima-gran-actualizacion-incluyendo-dos-graves-vulnerabilidades-de-dia-cero\/","title":{"rendered":"Microsoft corrige 61 fallos de seguridad en su \u00faltima gran actualizaci\u00f3n, incluyendo dos graves vulnerabilidades de d\u00eda cero"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>Microsoft<\/strong> ha lanzado una serie de actualizaciones de seguridad que abordan un total de 61 fallos en su software, incluyendo dos <a href=\"https:\/\/www.softonic.com\/articulos\/microsoft-corrige-dos-exploits-de-dia-cero-que-podian-utilizarse-para-colarte-malware\">vulnerabilidades de d\u00eda cero<\/a> que han sido <strong>explotadas en entornos reales<\/strong>. Estos parches se suman a las <strong>30 vulnerabilidades corregidas en el navegador Edge<\/strong> el mes pasado, lo que subraya la gravedad de la situaci\u00f3n.<\/p>\n\n\n<div class=\"sc-card-program\">\r\n  <div class=\"sc-card-program__body\">\r\n    <div class=\"sc-card-program__row clearfix\">\r\n      <div class=\"sc-card-program__col-logo\">\r\n        <img decoding=\"async\" class=\"sc-card-program__img\" src=\"https:\/\/images.sftcdn.net\/images\/t_app-icon-s\/p\/9de631e4-96d2-11e6-be3c-00163ec9f5fa\/1794891465\/kaspersky-kaspersky.png\" alt=\"Kaspersky Anti-Virus\" width=\"100px\" height=\"100px\">\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-title\">\r\n        <span class=\"sc-card-program__title\">Kaspersky Anti-Virus<\/span>\r\n        <a class=\"sc-card-program__button sc-card-program-internal\" href=\"https:\/\/kaspersky.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\">DESCARGAR<\/a>\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-rating\">\r\n        <svg class=\"rating-score__content\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" version=\"1.1\" x=\"0\" y=\"0\" viewbox=\"0 0 50 50\" enable-background=\"new 0 0 50 50\" xml:space=\"preserve\"><path class=\"rating-score__background rating-score--good\" fill=\"none\" stroke-width=\"6\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><path class=\"rating-score__value rating-score__value--0\" fill=\"none\" stroke-width=\"6\" stroke-dashoffset=\"0\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><text class=\"rating-score__number\" content=\"\" text-anchor=\"middle\" transform=\"matrix(1 0 0 1 25 31.0837)\" data-auto=\"app-user-score\"><\/text><\/svg>\r\n      <\/div>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <span class=\"sc-card-program__description\"><\/span>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <img decoding=\"async\" class=\"sc-card-program__bigpic\" src=\"\" onerror=\"this.style.display='none'\">\r\n    <\/div>\r\n    <a class=\"sc-card-program__link track-link sc-card-program-internal\" href=\"https:\/\/kaspersky.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\"><\/a>\r\n  <\/div>\r\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">De los <a href=\"https:\/\/msrc.microsoft.com\/update-guide\/releaseNote\/2024-May\" target=\"_blank\" rel=\"noopener nofollow\" title=\"\">61 fallos corregidos<\/a>, uno es cr\u00edtico, 59 son importantes y uno es de gravedad moderada. Las vulnerabilidades explotadas activamente en entornos reales son <strong>CVE-2024-30040<\/strong> y <strong>CVE-2024-30051<\/strong>. La primera afecta a la plataforma <strong>Windows MSHTML<\/strong> y la segunda a la biblioteca principal de <strong>Windows Desktop Window Manager (DWM)<\/strong>, con posibles consecuencias graves para los usuarios.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Seg\u00fan Microsoft, un atacante podr\u00eda <strong>ejecutar c\u00f3digo arbitrario en el contexto del usuario<\/strong> si explota con \u00e9xito la vulnerabilidad CVE-2024-30040. Por otro lado, CVE-2024-30051 podr\u00eda permitir a un atacante <strong>obtener privilegios de sistema<\/strong>, d\u00e1ndole acceso general al dispositivo de la v\u00edctima, seg\u00fan los investigadores.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">La <strong>Agencia de Ciberseguridad y Seguridad de las Infraestructuras de los Estados Unidos<\/strong> a\u00f1adi\u00f3 estas <a href=\"https:\/\/www.softonic.com\/articulos\/google-logra-solucionar-uno-de-sus-mayores-quebraderos-de-cabeza-hasta-la-fecha\">vulnerabilidades<\/a> a su cat\u00e1logo de \u201cVulnerabilidades explotadas conocidas\u201d, lo que destaca su importancia y la necesidad de una acci\u00f3n r\u00e1pida por parte de los organismos p\u00fablicos.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" src=\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/2\/2023\/03\/escritorio-hacker-1024x498.jpg\" alt=\"\" class=\"wp-image-277891\" \/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Adem\u00e1s de las vulnerabilidades explotadas activamente, Microsoft tambi\u00e9n ha corregido varios <strong>fallos de ejecuci\u00f3n remota de c\u00f3digo<\/strong>, incluidos aquellos que afectan al <strong>controlador de banda ancha de Windows Mobile<\/strong> y al <strong>servicio de enrutamiento y acceso remoto de Windows (RRAS)<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Se destacan tambi\u00e9n <strong>fallos de escalada de privilegios<\/strong> en diversos componentes de Windows, como el controlador Common Log File System (CLFS), Win32k, Windows Search Service y Windows Kernel. Estos fallos son de extrema gravedad, ya que podr\u00edan ser explotados por malhechores para <strong>obtener acceso a los sistemas inform\u00e1ticos<\/strong> de sus v\u00edctimas.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">En marzo de 2024, la empresa de ciberseguridad <strong>Kaspersky<\/strong> revel\u00f3 que los ciberdelincuentes estaban explotando fallos activamente que, por fortuna, ya han sido parcheados en Windows, lo que destaca la importancia de aplicar parches de seguridad lo antes posible.<\/p>\n\n\n<div class=\"sc-card-program\">\r\n  <div class=\"sc-card-program__body\">\r\n    <div class=\"sc-card-program__row clearfix\">\r\n      <div class=\"sc-card-program__col-logo\">\r\n        <img decoding=\"async\" class=\"sc-card-program__img\" src=\"https:\/\/images.sftcdn.net\/images\/t_app-icon-s\/p\/9de631e4-96d2-11e6-be3c-00163ec9f5fa\/1794891465\/kaspersky-kaspersky.png\" alt=\"Kaspersky Anti-Virus\" width=\"100px\" height=\"100px\">\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-title\">\r\n        <span class=\"sc-card-program__title\">Kaspersky Anti-Virus<\/span>\r\n        <a class=\"sc-card-program__button sc-card-program-internal\" href=\"https:\/\/kaspersky.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\">DESCARGAR<\/a>\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-rating\">\r\n        <svg class=\"rating-score__content\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" version=\"1.1\" x=\"0\" y=\"0\" viewbox=\"0 0 50 50\" enable-background=\"new 0 0 50 50\" xml:space=\"preserve\"><path class=\"rating-score__background rating-score--good\" fill=\"none\" stroke-width=\"6\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><path class=\"rating-score__value rating-score__value--0\" fill=\"none\" stroke-width=\"6\" stroke-dashoffset=\"0\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><text class=\"rating-score__number\" content=\"\" text-anchor=\"middle\" transform=\"matrix(1 0 0 1 25 31.0837)\" data-auto=\"app-user-score\"><\/text><\/svg>\r\n      <\/div>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <span class=\"sc-card-program__description\"><\/span>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <img decoding=\"async\" class=\"sc-card-program__bigpic\" src=\"\" onerror=\"this.style.display='none'\">\r\n    <\/div>\r\n    <a class=\"sc-card-program__link track-link sc-card-program-internal\" href=\"https:\/\/kaspersky.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\"><\/a>\r\n  <\/div>\r\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft ha lanzado una serie de actualizaciones de seguridad que abordan un total de 61 fallos en su software, incluyendo dos vulnerabilidades de d\u00eda cero que han sido explotadas en entornos reales. Estos parches se suman a las 30 vulnerabilidades corregidas en el navegador Edge el mes pasado, lo que subraya la gravedad de la &hellip; <a href=\"https:\/\/cms-articles.softonic.io\/es\/microsoft-corrige-61-fallos-de-seguridad-en-su-ultima-gran-actualizacion-incluyendo-dos-graves-vulnerabilidades-de-dia-cero\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Microsoft corrige 61 fallos de seguridad en su \u00faltima gran actualizaci\u00f3n, incluyendo dos graves vulnerabilidades de d\u00eda cero&#8221;<\/span><\/a><\/p>\n","protected":false},"author":9256,"featured_media":262353,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":1},"categories":[9317],"tags":[],"usertag":[],"vertical":[],"content-category":[],"class_list":["post-332489","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/posts\/332489","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/users\/9256"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/comments?post=332489"}],"version-history":[{"count":0,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/posts\/332489\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/media\/262353"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/media?parent=332489"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/categories?post=332489"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/tags?post=332489"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/usertag?post=332489"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/vertical?post=332489"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/content-category?post=332489"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}