Executive brief
Windows Enterprise App Management is a system component used by organizations to deploy and manage applications across their enterprise network. A heap-based buffer overflow vulnerability allows an authorized network user to execute arbitrary code with elevated privileges, potentially compromising the entire system and enabling lateral movement through the enterprise.
Technical details
A heap-based buffer overflow exists in Windows Enterprise App Management that can be exploited by an authorized attacker with network access. The vulnerability allows an attacker to overflow a heap buffer, potentially overwriting adjacent memory and achieving arbitrary code execution with elevated privileges. Exploitation requires prior authorization and network connectivity to the affected system. A patch has been released by Microsoft via their Security Update Guide.
Affected products
- Microsoft Windows Enterprise App Management
Timeline
- 2026-09-08: disclosed