CVE-2026-97800

Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally...

CVE-2026-70216

Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally...

CVE-2026-70216

A vulnerability exists in Windows Mobile Device Management due to insufficient granularity of access control . This flaw allows an authorized attacker to perform tampering locally . The vulnerability has a CVSS 3.1 score of 5.5 (Medium) and is associated with CWE-1220 . No specific details regard...

EUVD-2026-99066

Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally...

CVE-2026-97800

A vulnerability in Windows Mobile Broadband arises from an incorrect permission assignment for a critical resource. This flaw allows an authorized attacker to achieve local privilege elevation . While the CVSS 3.1 score reflects a High severity (7.8), specific details regarding the affected compo...

Windows Mobile Device Management Tampering Vulnerability

Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally...

Windows Mobile Broadband Elevation of Privilege Vulnerability

Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally...

PT-2026-113230

Name of the Vulnerable Software and Affected Versions Windows Mobile Broadband affected versions not specified Description Incorrect permission assignment for a critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally. Recommendations At the moment...

CVE-2026-70216: Insufficient Granularity of Access Control

Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-70216: Windows Mobile Device Management Tampering Vulnerability

Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally...

CVE-2026-97800: Incorrect Permission Assignment for Critical Resource

Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-97800: Windows Mobile Broadband Elevation of Privilege Vulnerability

Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally...

CVE-2026-70579

Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73656

Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network...

CVE-2026-70579

CVE-2026-70579 is an out-of-bounds read in Windows Mobile Broadband that allows an unauthorized, remote attacker to disclose information over a network without requiring user interaction or prior authentication. The assigned CVSS 3.1 base score is 7.5 (HIGH) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:...

Windows Mobile Broadband Information Disclosure Vulnerability

Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network...

CVE-2026-70579: Out-of-bounds Read

Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network...

PT-2026-87814

Name of the Vulnerable Software and Affected Versions Windows Mobile Broadband affected versions not specified Description An out-of-bounds read exists in Windows Mobile Broadband, which allows an unauthorized attacker to disclose sensitive information over a network. An out-of-bounds read occurs...

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation due to improper validation of JWT aud and iss claims in the Windows MDM authentication flow. An attacker can enroll unauthorized devices by presenting a valid Microsoft-signed Azure AD token from any tenant. This is...

Exposure of Data Element to Wrong Session

Overview Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session in the MDM command processing while handling SyncML status code. An attacker can obtain sensitive configuration data belonging to other devices such as WiFi credentials, VPN secrets, and...