CVE-2026-83657

Awaiting Analysis Awaiting Analysis - Queue

Weak Authentication in Windows Modern Device Management Allows Local Tampering

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: Microsoft Corporation

Description

Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-13

Generated

2026-10-19

AI Q&A

2026-10-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-83657

EUVD

EUVD-2026-99318

Affected Vendors & Products

Vendor	Product	Version / Range
Microsoft	Windows	10 Version 1809 10.0.17763.0
Microsoft	Windows	Server 2019 10.0.17763.0
Microsoft	Windows	Server 2019 (Server Core installation) 10.0.17763.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1390	The product uses an authentication mechanism to restrict access to specific users or identities, but the mechanism does not sufficiently prove that the claimed identity is correct.

Attack-Flow Graph

Executive Summary

This vulnerability involves weak authentication in Windows Modern Device Management (MDM). An authorized attacker can exploit this to perform tampering on a local system.

Impact Analysis

An attacker could modify system settings or configurations locally, potentially leading to unauthorized changes or disruptions in device management.

Compliance Impact

This vulnerability allows local tampering due to weak authentication in Windows MDM. Such tampering could lead to unauthorized modifications of system configurations or data, potentially violating integrity requirements in GDPR and HIPAA. However, specific compliance impacts are not detailed in the provided context.

Mitigation Strategies

Apply the latest security updates from Microsoft to address the weak authentication in Windows MDM. Monitor Microsoft's update guide for patches and ensure all affected systems are updated promptly.

Hi! I’m here to help you understand CVE-2026-83657. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70