CVE-2026-0028
published 2026-03-02CVE-2026-0028: In __pkvm_host_share_guest of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of…
PriorityP345high8.4CVSS 3.1
AVLACLPRNUINSUCHIHAH
EPSS
0.15%
4.3th percentile
In __pkvm_host_share_guest of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-pvrh-vq42-jm3w: In __pkvm_host_share_guest of mem_protect
ghsa_unreviewed·2026-03-02
CVE-2026-0028 [HIGH] CWE-190 GHSA-pvrh-vq42-jm3w: In __pkvm_host_share_guest of mem_protect
In __pkvm_host_share_guest of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
OSV
CVE-2026-0028: In __pkvm_host_share_guest of mem_protect
osv·2026-03-01
CVE-2026-0028 CVE-2026-0028: In __pkvm_host_share_guest of mem_protect
In __pkvm_host_share_guest of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
No detection rules found.
No public exploits indexed.
Wiz
RUSTSEC-2026-0028 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 7.5
[HIGH] RUSTSEC-2026-0028 Impact, Exploitability, and Mitigation Steps | Wiz
## RUSTSEC-2026-0028 :
Rust vulnerability analysis and mitigation
tracings
Source : NVD
Published February 26, 2026
CNA Score N/A
Affected Technologies
Rust
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) N/A
Exploitation Probability (EPSS) N/A
Affected packages and libraries
tracing_checks
Sources
NVD
Rust No Fix Added at: Mar 02, 2026
## Get a CVE risk assessment
Get a prioritized view of CVEs in your cloud—so you can focus on what's exploitable, not just what's listed.
## Related Rust vulnerabilities:
CVE ID
Severity
Score
Technologies
Component name
CISA KEV exploit
Has fix
Published date
GHSA-2c6h-4899-wjxr
HIGH
8.7
Rust
scaly
No
No
Apr 04, 2026
CVE-2026-3
Bugzilla
CVE-2026-58347 moodle: DoS risk via user profile description [fedora-all]
bugzilla·2026-07-28
CVE-2026-58347 [MEDIUM] CVE-2026-58347 moodle: DoS risk via user profile description [fedora-all]
CVE-2026-58347 moodle: DoS risk via user profile description [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
MSA-26-0028: DoS risk via user profile description
Description: User profile descriptions for authenticated users posed a
denial of service risk due to the absence of a defined
maximum length.
Issue summary: DoS risk via user profile description
Severity/Risk: Serious
Versions affected: 5.2, 5.1 to 5.1.4, 5.0 to 5.0.7, 4.5 to 4.5.11 and earlier
unsupported versions
Versions fixed: 5.2.1, 5.1.5, 5.0.8 and 4.5.12
Reported by: David Bogner
Issue no.: MDL-87898
Bugzilla
CVE-2026-58347 moodle: DoS risk via user profile description
bugzilla·2026-06-30
CVE-2026-58347 [MEDIUM] CVE-2026-58347 moodle: DoS risk via user profile description
CVE-2026-58347 moodle: DoS risk via user profile description
MSA-26-0028: DoS risk via user profile description
Description: User profile descriptions for authenticated users posed a
denial of service risk due to the absence of a defined
maximum length.
Issue summary: DoS risk via user profile description
Severity/Risk: Serious
Versions affected: 5.2, 5.1 to 5.1.4, 5.0 to 5.0.7, 4.5 to 4.5.11 and earlier
unsupported versions
Versions fixed: 5.2.1, 5.1.5, 5.0.8 and 4.5.12
Reported by: David Bogner
Issue no.: MDL-87898
https://android.googlesource.com/kernel/common/+/986614312222d4b3bdcf16840cdb4abdaed8a42dhttps://android.googlesource.com/kernel/common/+/aff2255dbe38dc7c57bac8d3ba9feed989289b20https://android.googlesource.com/kernel/common/+/f3a4b4d4a1fe2aface7de74ac257b8705b6de472https://source.android.com/docs/security/bulletin/2026/2026-03-01
2026-03-02
Published