CVE-2026-70579

Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73656

Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network...

CVE-2026-70579

CVE-2026-70579 is an out-of-bounds read in Windows Mobile Broadband that allows an unauthorized, remote attacker to disclose information over a network without requiring user interaction or prior authentication. The assigned CVSS 3.1 base score is 7.5 (HIGH) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:...

Windows Mobile Broadband Information Disclosure Vulnerability

Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network...

CVE-2026-70579: Out-of-bounds Read

Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network...

PT-2026-87814

Name of the Vulnerable Software and Affected Versions Windows Mobile Broadband affected versions not specified Description An out-of-bounds read exists in Windows Mobile Broadband, which allows an unauthorized attacker to disclose sensitive information over a network. An out-of-bounds read occurs...

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation due to improper validation of JWT aud and iss claims in the Windows MDM authentication flow. An attacker can enroll unauthorized devices by presenting a valid Microsoft-signed Azure AD token from any tenant. This is...

Exposure of Data Element to Wrong Session

Overview Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session in the MDM command processing while handling SyncML status code. An attacker can obtain sensitive configuration data belonging to other devices such as WiFi credentials, VPN secrets, and...

CVE-2026-34391

Fleet is open source device management software. Prior to 4.81.1, a vulnerability in Fleet's Windows MDM command processing allows a malicious enrolled device to access MDM commands intended for other devices, potentially exposing sensitive configuration data such as WiFi credentials, VPN secrets...

CVE-2026-34391 Fleet Vulnerable to Windows MDM cross-device command disclosure

Fleet is open source device management software. Prior to 4.81.1, a vulnerability in Fleet's Windows MDM command processing allows a malicious enrolled device to access MDM commands intended for other devices, potentially exposing sensitive configuration data such as WiFi credentials, VPN secrets...

CVE-2026-24288

Heap-based buffer overflow in Windows Mobile Broadband allows an unauthorized attacker to execute code with a physical attack...

The vulnerability of the Windows Mobile Broadband Driver allows a hacker to execute arbitrary code.

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

EUVD-2026-10609

Heap-based buffer overflow in Windows Mobile Broadband allows an unauthorized attacker to execute code with a physical attack...

EUVD-2026-10608

Heap-based buffer overflow in Windows Mobile Broadband allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-24288

Heap-based buffer overflow in Windows Mobile Broadband allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-24288

Heap-based buffer overflow in Windows Mobile Broadband allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-24288

CVE-2026-24288 is a Windows vulnerability affecting the Windows Mobile Broadband Driver, described as a heap-based buffer overflow that enables code execution. The issue is tied to Windows Mobile Broadband Driver and is fixed by Microsoft updates; the advisory set lists the vulnerability as addre...

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Mobile Broadband allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-24288: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Mobile Broadband allows an unauthorized attacker to execute code with a physical attack...

PT-2026-24282

Name of the Vulnerable Software and Affected Versions Windows Mobile Broadband affected versions not specified Description A heap-based buffer overflow exists in the Windows Mobile Broadband driver. Exploitation of this issue could allow an unauthorized attacker to execute code. A physical attack...