55 matches found
CVE-2026-96855
Improper access control in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...
CVE-2026-96850
Use of uninitialized resource in Windows Modern Device Management MDM allows an authorized attacker to disclose information locally...
CVE-2026-85833
Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-83697
Time-of-check time-of-use toctou race condition in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...
CVE-2026-83656
Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...
CVE-2026-83654
Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-108396
Time-of-check time-of-use toctou race condition in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-108133
A release of invalid pointer or reference vulnerability exists in Windows Modern Device Management (MDM) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-763 and carries a High base severity score of 7.8. No specific expl...
CVE-2026-108396
A Time-of-check time-of-use (TOCTOU) race condition exists in Windows Modern Device Management (MDM) . This vulnerability allows an authorized attacker to achieve local privilege elevation . While the documents confirm the vulnerability's existence and its classification under CWE-367 , specific ...
CVE-2026-96850
A vulnerability in Windows Modern Device Management (MDM) involving the use of uninitialized resource (CWE-908) and improper null termination (CWE-170) allows an authorized attacker to disclose information locally . The vulnerability has a CVSS 3.1 base score of 5.5 with a local attack vector and...
CVE-2026-83697
A Time-of-check time-of-use (TOCTOU) race condition exists in Windows Modern Device Management (MDM) . This vulnerability allows an authorized attacker to perform tampering locally . No specific exploit details or remediation steps are provided in the documents.
CVE-2026-83656
A missing authentication vulnerability exists in the Windows Modern Device Management (MDM) component. This flaw allows an authorized attacker to perform tampering locally by accessing a critical function without proper authentication. The CVSS 3.1 score is 4.7 (Medium) , indicating a local attac...
CVE-2026-96855
Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-862 (Missing Authorization) . No specific exploit details or in-the-wild exploitation records are provided in the documents. Reme...
CVE-2026-85833
A Use after free vulnerability in Windows Modern Device Management (MDM) allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 base score of 7.8 (High) . No specific component files, exploit links, or patch versions are provided in the docu...
CVE-2026-83657
A weak authentication vulnerability exists in Windows Modern Device Management (MDM) . This flaw allows an authorized attacker to perform tampering locally on the affected system. The vulnerability is associated with CWE-1390 and has a CVSS 3.1 score of 5.5 (MEDIUM) . No specific exploit details ...
CVE-2026-83654
A local elevation of privilege vulnerability exists in Windows Modern Device Management (MDM) due to missing authentication for critical functions (CWE-306). An authorized attacker can exploit this flaw to gain higher privileges on the system. The vulnerability has a HIGH base severity score of 7...
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Time-of-check time-of-use toctou race condition in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
Windows Modern Device Management (MDM) Information Disclosure Vulnerability
Use of uninitialized resource in Windows Modern Device Management MDM allows an authorized attacker to disclose information locally...