Executive brief
Windows Modern Device Management (MDM) is a system component that manages corporate device policies and security settings across networks. A use-after-free vulnerability allows an authorized network attacker to execute code with elevated system privileges, potentially compromising device security, accessing sensitive data, and disrupting business operations.
Technical details
The vulnerability is a use-after-free memory corruption flaw in Windows Modern Device Management that permits an authorized attacker to craft a malicious network request triggering improper memory handling. The flaw allows reading or writing to freed memory regions, enabling arbitrary code execution in a privileged context. The attack requires network access and the attacker to be authorized on the network. Successful exploitation results in privilege escalation, granting complete control over the affected device. Microsoft has issued security updates to address this issue.
Affected products
- Microsoft Windows Modern Device Management
Timeline
- 2026-09-08: disclosed