CVE-2026-108396

LOWCVSS 7.0 · HIGH

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108396

Weakness type (CWE)

CWE-367

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post

VulniPulse@vulnipulse1d
CVE advisory: CVE-2026-108396 - microsoft: Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability. https://vulnipulse.com/advisories/microsoft-cve-2026-108396 #CVE #CyberSecurity #Microsoft #WindowsServer
1000023
30 followersView on X

Explore more

Back to dashboard