CVE-2026-0014
published 2026-03-02CVE-2026-0014: In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local…
PriorityP424medium6.2CVSS 3.1
AVLACLPRNUINSUCNINAH
EPSS
0.12%
1.5th percentile
In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| platform | frameworks_base | >= 14:0 < 14:2026-03-01 | 14:2026-03-01 |
| platform | frameworks_base | >= 15:0 < 15:2026-03-01 | 15:2026-03-01 |
| platform | frameworks_base | >= 16-qpr2-next:0 < 16-qpr2-next:2026-03-01 | 16-qpr2-next:2026-03-01 |
| platform | frameworks_base | >= 16-qpr2:0 < 16-qpr2:2026-03-01 | 16-qpr2:2026-03-01 |
| platform | frameworks_base | >= 16:0 < 16:2026-03-01 | 16:2026-03-01 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-6q27-xh8h-m5vg: In isPackageNullOrSystem of AppOpsService
ghsa_unreviewed·2026-03-02
CVE-2026-0014 [MEDIUM] CWE-20 GHSA-6q27-xh8h-m5vg: In isPackageNullOrSystem of AppOpsService
In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
OSV
CVE-2026-0014: In isPackageNullOrSystem of AppOpsService
osv·2026-03-01
CVE-2026-0014 CVE-2026-0014: In isPackageNullOrSystem of AppOpsService
In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
No detection rules found.
No public exploits indexed.
Wiz
CVE-2026-0014 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 6.2
CVE-2026-0014 [MEDIUM] CVE-2026-0014 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-0014 :
NixOS vulnerability analysis and mitigation
In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Source : NVD
## 6.2
Score
Published March 2, 2026
Severity MEDIUM
CNA Score 6.2
Affected Technologies
NixOS
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 0.1
Exploitation Probability (EPSS) N/A
Affected packages and libraries
android
Sources
NVD
Nix Severity MEDIUM No Fix Added at: Mar 04, 2026
## Get a CVE risk assessment
Get a prioritized view
Bugzilla
CVE-2026-58333 moodle: Arbitrary file read risk in backup restore [fedora-all]
bugzilla·2026-07-28
CVE-2026-58333 [MEDIUM] CVE-2026-58333 moodle: Arbitrary file read risk in backup restore [fedora-all]
CVE-2026-58333 moodle: Arbitrary file read risk in backup restore [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
MSA-26-0014: Arbitrary file read risk in backup restore
Description: An arbitrary file read risk was identified in the backup
restore functionality.
Issue summary: Arbitrary file read risk in backup restore
Severity/Risk: Serious
Versions affected: 5.2, 5.1 to 5.1.4, 5.0 to 5.0.7, 4.5 to 4.5.11 and earlier
unsupported versions
Versions fixed: 5.2.1, 5.1.5, 5.0.8 and 4.5.12
Reported by: LoWeST
Issue no.: MDL-88736
Bugzilla
CVE-2026-58333 moodle: Arbitrary file read risk in backup restore
bugzilla·2026-06-30
CVE-2026-58333 [MEDIUM] CVE-2026-58333 moodle: Arbitrary file read risk in backup restore
CVE-2026-58333 moodle: Arbitrary file read risk in backup restore
MSA-26-0014: Arbitrary file read risk in backup restore
Description: An arbitrary file read risk was identified in the backup
restore functionality.
Issue summary: Arbitrary file read risk in backup restore
Severity/Risk: Serious
Versions affected: 5.2, 5.1 to 5.1.4, 5.0 to 5.0.7, 4.5 to 4.5.11 and earlier
unsupported versions
Versions fixed: 5.2.1, 5.1.5, 5.0.8 and 4.5.12
Reported by: LoWeST
Issue no.: MDL-88736
2026-03-02
Published