CVE-2026-28580 is a vulnerability involving an incorrect bounds check in multiple functions that may cause a desynchronization in persistence. This flaw can be exploited locally to escalate privileges without requiring additional execution rights or user interaction. The vulnerability has a high severity rating with significant impact on confidentiality, integrity, and availability.