722 matches found
PT-2026-103798
Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results endpoint. Team-scoped users can read MDM command results for hosts on other teams when a shared command UUID targets hosts across multiple teams, exposing host UUIDs, command...
Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls
The logistics sector has become the target of a new malicious cyber campaign that distributes an Android spyware codenamed Corp MDM. According to Have I Been Squatted, the campaign uses fake Google Play pages branded as CEVA and TKW Logistics to distribute an Android Package Kit APK file that's...
macOS-enterprise-privileges v2.6.0
Privileges Transparent, free, and secure admin rights management for macOS. Privileges is a free macOS application designed for modern enterprise environments. It gives users temporary administrator privileges when needed without granting permanent admin rights. The application is built with...
fleet fleet-v4.91.1
News · Report a bug · Docs · Why open source? · Art Open-source platform for IT and security teams with thousands of computers. Designed for APIs, GitOps, webhooks, YAML, and humans. What's it for? Fleet gives you a single system to secure and maintain all your computing devices over the air. You...
CVE-2026-73022
Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-70577
Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-69674
Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to bypass a security feature locally...
CVE-2026-69460
Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges over a network...
CVE-2026-69377
Missing authorization in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-73022
CVE-2026-73022 is a use-after-free vulnerability in Windows Modern Device Management (MDM) that allows an authorized attacker to escalate privileges locally . The CVSS 3.1 score is 7.0 (HIGH) with a local attack vector, high complexity, low privileges required, and no user interaction, resulting ...
EUVD-2026-73763
Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
EUVD-2026-73762
Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-73003
CVE-2026-73003 is a Use After Free vulnerability in Windows Modern Device Management (MDM) . An authorized attacker can exploit it to achieve local privilege elevation . The CVSS v3.1 base score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high impact across confident...
CVE-2026-70577
CVE-2026-70577 is a use-after-free vulnerability in Windows Modern Device Management (MDM) that allows an authorized attacker to achieve local privilege escalation . The flaw is rated CVSS 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a locally exploitable issue with...
EUVD-2026-73588
Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to bypass a security feature locally...
CVE-2026-69674
Windows Modern Device Management (MDM) contains a missing authentication vulnerability in a critical function that allows a locally authenticated attacker to bypass a security feature . The CVSS v3.1 score is 5.5 (MEDIUM) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N , indicating a local a...
EUVD-2026-73513
Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges over a network...
CVE-2026-69460
CVE-2026-69460 is a use-after-free vulnerability in Windows Modern Device Management (MDM) that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires a netw...
