CVE-2026-108133

Опубликовано: 13 окт. 2026

Источник: msrc

CVSS3: 7.8

EPSS Низкий

Описание

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

What privileges could be gained by an attacker who successfully exploited this vulnerability?

An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Продукт	Статья	Обновление
Windows Server 2022	5126655	Security Update
Windows Server 2022 (Server Core installation)	5126655	Security Update

Показывать по

Publicly Disclosed

Exploited

Latest Software Release

Exploitation Less Likely

EPSS

Процентиль: 29%

0.00353

Низкий

7.8 High

CVSS3

CVE-2026-108133

CVSS3: 7.8

nvd

26 дней назад

Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

GHSA-9qgr-w83p-v6xm

CVSS3: 7.8

github

26 дней назад

Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

EPSS

Процентиль: 29%

0.00353

Низкий

7.8 High

CVSS3