Microsoft Configuration Manager
General38982839
In brief
The documentation now states that the update addresses the elevation-of-privilege vulnerability described in CVE-2026-88075.
What Intune admins need to know
Administrators can use the CVE reference to identify the security issue addressed by this update.
This summary was assembled from the tracked documentation change. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
This update fixes the following security issues in Configuration Manager:
- An issue with the SMS Provider. This update addresses the elevation of privilege vulnerability described in CVE-2026-88075.
- An issue with the administration service. This is a defense-in-depth fix related to a Windows SMB Server issue, addressed separately by CVE-2026-26128. We strongly recommend that you also install the applicable Windows security update.
Hotfixes that are included in this update
@@ -38,12 +38,12 @@ item_type: Content source_path: intune/configmgr/hotfix/2603/38982839.md cmProducts: - https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/4c50f262-d533-4ba4-9d4a-08899ec3a3d1+- https://authoring-docs-microsoft.poolparty.biz/devrel/fcc3cd4a-59ea-47a2-9cc1-784142a5a25d - https://authoring-docs-microsoft.poolparty.biz/devrel/bcbcbad5-4208-4783-8035-8481272c98b8-- https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/691e3042-55ad-4ce1-b5e9-649b1cc47b5c spProducts: - https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/6a8c83be-f1de-4e90-bde0-bd097999a60c+- https://authoring-docs-microsoft.poolparty.biz/devrel/d7a55faf-a992-4e27-aa3a-eadc9830e778 - https://authoring-docs-microsoft.poolparty.biz/devrel/43b2e5aa-8a6d-4de2-a252-692232e5edc8-- https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/b7d11190-096c-4ddb-87db-63764f603aac platformId: 17bdafc0-4c46-c89a-be26-d632cd7a83c9 --- @@ -59,7 +59,7 @@ This update is superseded by [KB 39398030](39398030).
This update fixes the following security issues in Configuration Manager:
-- An issue with the SMS Provider.
+- An issue with the SMS Provider. This update addresses the elevation of privilege vulnerability described in [CVE-2026-88075](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88075).
- An issue with the administration service. This is a defense-in-depth fix related to a Windows SMB Server issue, addressed separately by [CVE-2026-26128](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26128). We strongly recommend that you also install the applicable Windows security update.
## Hotfixes that are included in this update