CVE-2026-108133
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Published Oct 13, 2026 · updated Oct 14, 2026 · Microsoft Windows Server 2022
Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · CIRCL Vulnerability Lookup
Detected
Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
Oct 14, 2026 · CIRCL Vulnerability Lookup
Updated
Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
Affected
- vendor Microsoft Windows Server 2022version unspecified
Sources
- CIRCL Vulnerability LookupCVE-2026-108133
Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
vulnerability.circl.lu - CVE.orgCVE-2026-108133
Official CVE identifier
cve.org - FIRST EPSSCVE-2026-108133
30-day exploitation probability 0.3%
first.org