CVE Catalog
CVE-2026-70216
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.31%
22th percentile - higher than 22% of all known CVEs
Summary
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.
Risk Assessment
An attacker with local access could modify configuration or data managed by MDM, potentially violating device security policies.
Recommendation
Install Microsoft security patches for Windows MDM and restrict local administrative privileges.
Other vulnerabilities in Windows Mobile Device Management
Original NVD description (English source)
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS