high7.8
CVE-2026-108133
Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
Impact
Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows Server 2022 | from 10.0.20348.0 before 10.0.20348.5761 |
| Microsoft | Windows Server 2022 | before 10.0.20348.5761 |