CVE-2026-108396
CVE-2026-108396 · Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVSS 7.0 · High · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
windows 10 version 1809
- Versions
- ≥ 10.0.17763.0, < 10.0.17763.9376: Affected (custom)
Update to 10.0.17763.9376
windows 10 version 21h2
- Versions
- ≥ 10.0.19044.0, < 10.0.19044.7807: Affected (custom)
Update to 10.0.19044.7807
windows 10 version 22h2
- Versions
- ≥ 10.0.19045.0, < 10.0.19045.7807: Affected (custom)
Update to 10.0.19045.7807
windows 11 version 23h2
- Versions
- ≥ 10.0.22631.0, < 10.0.22631.7652: Affected (custom)
Update to 10.0.22631.7652
windows 11 version 24h2
- Versions
- ≥ 10.0.26100.0, < 10.0.26100.9711: Affected (custom)
Update to 10.0.26100.9711
windows 11 version 25h2
- Versions
- ≥ 10.0.26200.0, < 10.0.26200.9711: Affected (custom)
Update to 10.0.26200.9711
windows 11 version 26h1
- Versions
- ≥ 10.0.28000.0, < 10.0.28000.3231: Affected (custom)
Update to 10.0.28000.3231
windows 11 version 26h2
- Versions
- ≥ 10.0.26300.0, < 10.0.26300.9711: Affected (custom)
Update to 10.0.26300.9711
windows server 2019
- Versions
- ≥ 10.0.17763.0, < 10.0.17763.9376: Affected (custom)
Update to 10.0.17763.9376
windows server 2019 (server core installation)
- Versions
- ≥ 10.0.17763.0, < 10.0.17763.9376: Affected (custom)
Update to 10.0.17763.9376
windows server 2022
- Versions
- ≥ 10.0.20348.0, < 10.0.20348.5761: Affected (custom)
Update to 10.0.20348.5761
windows server 2025
- Versions
- ≥ 10.0.26100.0, < 10.0.26100.33650: Affected (custom)
Update to 10.0.26100.33650
windows server 2025 (server core installation)
- Versions
- ≥ 10.0.26100.0, < 10.0.26100.33650: Affected (custom)
Update to 10.0.26100.33650