---
id: "CVE-2026-96184"
page: "https://infrastack.ai/live/CVE-2026-96184"
kind: "vulnerability"
aliases: ["CVE-2026-96184"]
title: "Windows MDM: heap overflow lets an authorized user gain local privileges"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["endpoint-management", "infrastructure", "local-privilege-escalation", "mdm", "windows"]
not_affected_if: ["no-mdm-enrollment", "unmanaged-devices"]
published_at: "2026-11-10T19:22:18+00:00"
first_seen_at: "2026-11-10T19:25:33+00:00"
updated_at: "2026-11-10T19:40:06+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96184", "first_seen_at": "2026-11-10T19:25:33+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-11-10T19:40:06+00:00"}]
exploit_sources: []
---

# Windows MDM: heap overflow lets an authorized user gain local privileges

Link for people: https://infrastack.ai/live/CVE-2026-96184 (this .md is for agents)

A heap-based buffer overflow in Windows Modern Device Management (MDM) lets an attacker who already has authorized access raise their privileges on the local machine. The sources do not describe a remote trigger or a public exploit.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

Unknown until the MSRC advisory is read. Likely check: compare the installed Windows build (winver or Get-ComputerInfo) with the build listed for CVE-2026-96184 in the Microsoft Security Update Guide.

## Timeline

- 2026-11-10T19:25:33+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-96184
- 2026-11-10T19:40:06+00:00 analyst — Could not retrieve the MSRC advisory (update-guide pages return empty) or any third-party page for this CVE; NVD fetch also empty. Affected builds, fixed KB and MDM precondition remain unknown. Nothing verified. Needs the MSRC page or Microsoft's November 2026 Patch Tuesday release notes (possible fix release date 2026-11-10, not confirmed). Do not confuse with sibling MDM CVE-2026-62707 (use-after-free, August).

## From the sources

Heap-based buffer overflow in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_