CVE-2026-0038
published 2026-03-02CVE-2026-0038: In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation…
PriorityP348high8.4CVSS 3.1
AVLACLPRNUINSUCHIHAH
EPSS
0.24%
14.0th percentile
In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| msrc | azl3_hyperv-daemons_6.6.126.1-1_on_azure_linux_3.0 | — | — |
CVSS provenance
nvdv3.18.4HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vendor_msrc8.4HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Microsoft
In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of privilege with no additional executio
vendor_msrc·2026-03-10·CVSS 8.4
CVE-2026-0038 [HIGH] In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of privilege with no additional executio
In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Mariner: Mariner
google_android: google_android
Customer Action Required: Yes
GHSA
GHSA-vfwv-f5wm-rhcv: In multiple functions of mem_protect
ghsa_unreviewed·2026-03-02
CVE-2026-0038 [HIGH] GHSA-vfwv-f5wm-rhcv: In multiple functions of mem_protect
In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
OSV
CVE-2026-0038: In multiple functions of mem_protect
osv·2026-03-01
CVE-2026-0038 CVE-2026-0038: In multiple functions of mem_protect
In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
No detection rules found.
No public exploits indexed.
Bleepingcomputer
Microsoft March 2026 Patch Tuesday fixes 2 zero-days, 79 flaws
blogs_bleepingcomputer·2026-03-10·CVSS 8.8
[HIGH] Microsoft March 2026 Patch Tuesday fixes 2 zero-days, 79 flaws
## Microsoft March 2026 Patch Tuesday fixes 2 zero-days, 79 flaws
## Lawrence Abrams
The number of bugs in each vulnerability category is listed below:
46 Elevation of Privilege Vulnerabilities
2 Security Feature Bypass Vulnerabilities
18 Remote Code Execution Vulnerabilities
10 Information Disclosure Vulnerabilities
4 Denial of Service Vulnerabilities
4 Spoofing Vulnerabilities
When BleepingComputer reports on Patch Tuesday security updates, we only count those released by Microsoft today. Therefore, the number of flaws does not include 9 Microsoft Edge flaws, Mariner, Payment Orchestrator Service, Azure, and Microsoft Devices Pricing Program flaws fixed earlier this month.
To learn more about the non-security updates released today, you can review our dedicated articles on the
Bugzilla
CVE-2026-12893 gstreamer1-libav: gstreamer1-libav: NULL pointer dereference in gstavdemux.c error handler
bugzilla·2026-06-22
CVE-2026-12893 [MEDIUM] CVE-2026-12893 gstreamer1-libav: gstreamer1-libav: NULL pointer dereference in gstavdemux.c error handler
CVE-2026-12893 gstreamer1-libav: gstreamer1-libav: NULL pointer dereference in gstavdemux.c error handler
NULL pointer dereference in gst-libav plugin's gst_ffmpegdemux_open() error handler (gstavdemux.c:1392-1397). When demux initialization fails via gst_ffmpegdata_open/gst_ffmpeg_pipe_open (line 1244-1245) or avformat_open_input (line 1271-1278), the beach: error handler dereferences demux->context->pb without NULL-checking demux->context first. In failure scenario 1, context is never allocated; in scenario 2, avformat_open_input() frees context on error. The crash occurs at offset 0x20 (pb field offset in AVFormatContext). Affects all gst-libav versions. Fixed in GStreamer 1.28.4 via security MR 78 (GST-SA-2026-0038). Upstream confirmed by Sebastian Dröge. Reported by Dr. Faruk Kazi, R
https://android.googlesource.com/kernel/common/+/1bf8033b56a45165602f8116e0a0d2e767f1e8aehttps://android.googlesource.com/kernel/common/+/513ea99ae008b81dd266bf6e361627c058ddde41https://android.googlesource.com/kernel/common/+/652b7b6bf9a62cc12c3a071bab4e92314f046739https://android.googlesource.com/kernel/common/+/7e1d15d29b7fe0f858926a8bcaf929b75db9e52ahttps://android.googlesource.com/kernel/common/+/b23a5bfa1fb8f9525e21f095a87486a2bd856321https://android.googlesource.com/kernel/common/+/d884f499434c224285c30d460681f1ce76a8cf1fhttps://android.googlesource.com/kernel/common/+/f090d4b083a9ef4831f99e692c239542dd385cb4https://source.android.com/docs/security/bulletin/2026/2026-03-01
2026-03-02
Published