18 matches found
CVE-2026-108133
A release of invalid pointer or reference vulnerability exists in Windows Modern Device Management (MDM) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-763 and carries a High base severity score of 7.8. No specific expl...
CVE-2026-108396
A Time-of-check time-of-use (TOCTOU) race condition exists in Windows Modern Device Management (MDM) . This vulnerability allows an authorized attacker to achieve local privilege elevation . While the documents confirm the vulnerability's existence and its classification under CWE-367 , specific ...
CVE-2026-96850
A vulnerability in Windows Modern Device Management (MDM) involving the use of uninitialized resource (CWE-908) and improper null termination (CWE-170) allows an authorized attacker to disclose information locally . The vulnerability has a CVSS 3.1 base score of 5.5 with a local attack vector and...
CVE-2026-83697
A Time-of-check time-of-use (TOCTOU) race condition exists in Windows Modern Device Management (MDM) . This vulnerability allows an authorized attacker to perform tampering locally . No specific exploit details or remediation steps are provided in the documents.
CVE-2026-83656
A missing authentication vulnerability exists in the Windows Modern Device Management (MDM) component. This flaw allows an authorized attacker to perform tampering locally by accessing a critical function without proper authentication. The CVSS 3.1 score is 4.7 (Medium) , indicating a local attac...
CVE-2026-96855
Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-862 (Missing Authorization) . No specific exploit details or in-the-wild exploitation records are provided in the documents. Reme...
CVE-2026-85833
A Use after free vulnerability in Windows Modern Device Management (MDM) allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 base score of 7.8 (High) . No specific component files, exploit links, or patch versions are provided in the docu...
CVE-2026-83654
A local elevation of privilege vulnerability exists in Windows Modern Device Management (MDM) due to missing authentication for critical functions (CWE-306). An authorized attacker can exploit this flaw to gain higher privileges on the system. The vulnerability has a HIGH base severity score of 7...
CVE-2026-83657
A weak authentication vulnerability exists in Windows Modern Device Management (MDM) . This flaw allows an authorized attacker to perform tampering locally on the affected system. The vulnerability is associated with CWE-1390 and has a CVSS 3.1 score of 5.5 (MEDIUM) . No specific exploit details ...
Windows Modern Device Management (MDM) Tampering Vulnerability
Improper access control in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-69377: Missing Authorization
Missing authorization in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-73022: Use After Free
Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-69674: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to bypass a security feature locally...
CVE-2026-73003: Use After Free
Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-70577: Use After Free
Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...