EUVD-2026-73513

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73228

Missing authorization in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges over a network...

Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability

Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to bypass a security feature locally...

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Missing authorization in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-46371

Fleet is an open-source device management platform built on osquery. In versions up to and including 4.84.1, the Apple MDM commands listing endpoint GET /api/v1/fleet/mdm/apple/commands allowed an authenticated user with the lowest-privilege Observer role to extract sensitive values from joined...

CVE-2026-46371

Fleet (open-source device management platform built on osquery) versions up to 4.84.1 have a vulnerability in the Apple MDM commands endpoint (GET /api/v1/fleet/mdm/apple/commands). An unvalidated user-supplied order_key parameter, passed to a deprecated ORDER BY helper that joins the hosts and n...

CVE-2026-46371 Fleet: Observer-level enrollment secret extraction via ORDER BY oracle on Apple MDM commands endpoint

Fleet is an open-source device management platform built on osquery. In versions up to and including 4.84.1, the Apple MDM commands listing endpoint GET /api/v1/fleet/mdm/apple/commands allowed an authenticated user with the lowest-privilege Observer role to extract sensitive values from joined...

CVE-2026-46371 Fleet: Observer-level enrollment secret extraction via ORDER BY oracle on Apple MDM commands endpoint

Fleet is an open-source device management platform built on osquery. In versions up to and including 4.84.1, the Apple MDM commands listing endpoint GET /api/v1/fleet/mdm/apple/commands allowed an authenticated user with the lowest-privilege Observer role to extract sensitive values from joined...

EUVD-2026-63109

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.10, 3.9.24, and 3.8.71, a user who holds a Splunk role with permissions to list storage passwords but does not hold Splunk Secure Gateway administration privileges could access...

CVE-2026-62707

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-62707

CVE-2026-62707 affects Windows Modern Device Management (MDM). It is a use-after-free vulnerability that allows an authorized, local attacker to elevate privileges (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The connected documents confirm the same description; no exploitation status, exact ...

CVE-2026-62707 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

...

EUVD-2026-56351

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-62707 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

...

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

PT-2026-70470

Name of the Vulnerable Software and Affected Versions Windows Modern Device Management MDM affected versions not specified Description A use-after-free condition in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...