CVE-2026-108133
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Published Oct 13, 2026 · updated Oct 14, 2026 · Microsoft Windows
Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · CIRCL Vulnerability Lookup
Detected
Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
Oct 14, 2026 · CIRCL Vulnerability Lookup
Updated
Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
Affected
- microsoft Windows Server 2022version unspecified
- microsoft Windows Server 2022 (Server Core installation)version unspecified
- vendor Microsoft Windows Server 2022version unspecified
Sources
- CIRCL Vulnerability LookupVulnerability recordCVE-2026-108133
Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
vulnerability.circl.lu - CVE.orgVulnerability recordCVE-2026-108133
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2026-108133
30-day exploitation probability 0.3%
first.org - Microsoft Security Update GuideVendor advisoryCVE-2026-108133
Windows Server 2022, Windows Server 2022 (Server Core installation)
msrc.microsoft.com