Summary
Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
The attacker must inject themselves into the logical network path between the target and the resource requested by the victim to read or modify network communications. This is called a machine-in-the-middle (MITM) attack.
Security updates
10.0.17763.9487 — https://support.microsoft.com/help/5131085
10.0.19044.7846 — https://support.microsoft.com/help/5131096
10.0.20348.5870 — https://support.microsoft.com/help/5131090
10.0.22631.7711 — https://support.microsoft.com/help/5131087
10.0.26100.9974 — https://support.microsoft.com/help/5132061
10.0.26100.9911 — https://support.microsoft.com/help/5132043
10.0.26100.33822 — https://support.microsoft.com/help/5131080
10.0.26100.33730 — https://support.microsoft.com/help/5131077
10.0.28000.3501 — https://support.microsoft.com/help/5132059
Vulnerabilities 1
-
High 8.1
Windows Modern Device Management (MDM) Remote Code Execution Vulnerability
Inadequate encryption strength in Windows Modern Device Management (MDM) allows an unauthorized attacker to execute code over a network.
Revision history
-
#1
Information published.
References
-
CVE-2026-102219 Windows Modern Device Management (MDM) Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102219
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss