CVE-2026-108133: Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
Other sources
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.5761Patch KB5126655
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker must already be authorized on the affected system and have local access. The vulnerability enables elevation of privileges locally.
What security impact could successful exploitation have?
Successful exploitation could allow high-impact compromise of confidentiality, integrity, and availability on the affected system, as reflected by the CVSS vector.
Which products are identified as affected?
The provided data identifies Microsoft Windows Server 2022 and Microsoft Windows Modern Device Management (MDM).