p PatchFirst

CVE-2026-108133

CVE-2026-108133 · Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

CVSS 7.8 · High · EPSS 0.3% · Fix available

Published
Updated

Affected products and versions

  • windows server 2022

    Versions
    • ≥ 10.0.20348.0, < 10.0.20348.5761: Affected (custom)

    Update to 10.0.20348.5761

Original sources

Check your server →