CVE-2026-70216

Published: Oct 13, 2026Modified: Oct 16, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 1.8 / Impact: 3.6

Source: secure@microsoft.com (Secondary)

Description

Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.

Related CWEs

Insufficient Granularity of Access Control

The product implements access controls via a policy or other feature with the intention to disable or restrict accesses (reads and/or writes) to assets in a system from untrusted agents. However, implemented access controls lack required granularity, which renders the control policy too broad because it allows accesses from unauthorized agents to the security-sensitive assets.

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70216

Source: secure@microsoft.com

Timeline

No history available yet.