PT-2026-112016

Name of the Vulnerable Software and Affected Versions Windows Modern Device Management MDM affected versions not specified Description A time-of-check time-of-use toctou race condition exists in Windows Modern Device Management MDM. A TOCTOU race condition occurs when a program checks the state o...

CVE-2026-96850: Use of Uninitialized Resource

Use of uninitialized resource in Windows Modern Device Management MDM allows an authorized attacker to disclose information locally...

CVE-2026-83654: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-83657: Weak Authentication

Weak authentication in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-83657: Windows Modern Device Management (MDM) Tampering Vulnerability

Weak authentication in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...

PT-2026-112467

Name of the Vulnerable Software and Affected Versions Windows Modern Device Management MDM affected versions not specified Description Weak authentication in Windows Modern Device Management MDM allows an authorized attacker to perform local tampering, which can affect the system. Recommendations...

PT-2026-112012

Name of the Vulnerable Software and Affected Versions Windows Modern Device Management MDM affected versions not specified Description An issue exists where the release of an invalid pointer or reference allows an authorized attacker to elevate privileges locally. This elevation-of-privilege allo...

CVE-2026-83656: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-96850: Windows Modern Device Management (MDM) Information Disclosure Vulnerability

Use of uninitialized resource in Windows Modern Device Management MDM allows an authorized attacker to disclose information locally...

PT-2026-112466

Name of the Vulnerable Software and Affected Versions Windows Modern Device Management MDM affected versions not specified Description Missing authentication for a critical function allows an authorized attacker to perform local tampering, which can affect the system. Recommendations At the momen...

PT-2026-112501

Name of the Vulnerable Software and Affected Versions Windows Modern Device Management MDM affected versions not specified Description A time-of-check time-of-use toctou race condition exists in Windows Modern Device Management MDM. This flaw allows an authorized attacker to perform local...

Modern Device Management Privilege Escalation

The vulnerability of the Modern Device Management MDM component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Modern Device Management Privilege Escalation

The vulnerability of the Modern Device Management MDM component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

PT-2026-112798

Name of the Vulnerable Software and Affected Versions Windows Modern Device Management MDM affected versions not specified Description A use-after-free condition in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...

PT-2026-112464

Name of the Vulnerable Software and Affected Versions Windows Modern Device Management MDM affected versions not specified Description Missing authentication for a critical function in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally. Recommendation...

Microsoft Windows: CVE-2026-96855: Windows Modern Device Management (MDM) Tampering Vulnerability

Improper access control in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...

CVE-2026-109380

A flaw was found in modern-tar. A remote attacker can trigger a Denial of Service DoS by supplying a specially crafted archive containing malformed entry size values. When processing the invalid data, the parser fails to properly calculate file sizes and buffers data indefinitely, leading to memo...

CVE-2026-109380

modern-tar 0.3.5 through 0.8.5 contains a memory exhaustion vulnerability that allows attackers to produce negative entry sizes via non-octal bytes parsed by readOctal. Attackers can supply a crafted, optionally gzip-compressed, archive to unpackTar that buffers chunks indefinitely, exhausting...

CVE-2026-109380 modern-tar 0.3.5 through 0.8.5 Memory Exhaustion via Malformed Octal Size Field

modern-tar 0.3.5 through 0.8.5 contains a memory exhaustion vulnerability that allows attackers to produce negative entry sizes via non-octal bytes parsed by readOctal. Attackers can supply a crafted, optionally gzip-compressed, archive to unpackTar that buffers chunks indefinitely, exhausting...

EUVD-2026-97878

modern-tar 0.3.5 through 0.8.5 contains a memory exhaustion vulnerability that allows attackers to produce negative entry sizes via non-octal bytes parsed by readOctal. Attackers can supply a crafted, optionally gzip-compressed, archive to unpackTar that buffers chunks indefinitely, exhausting...