Microsoft Configuration Manager

39398030

14 October 2026Doc update+3 / −1 lines

In brief

The Message Processing Engine issue entry now states that the update addresses the elevation-of-privilege vulnerability described in CVE-2026-70049.

What Intune admins need to know

Administrators can use the CVE reference to assess the security relevance of this hotfix.

This summary was assembled from the tracked documentation change. Verify important details in the full Microsoft Learn article.

Documentation change

View full page diff

View on Microsoft Learn

The comparison below shows only the changed extract. Use the full-page view for complete context.

An issue with scripts.
An issue with the SMS Provider.
An issue with the Message Processing Engine. This update addresses the elevation of privilege vulnerability described in CVE-2026-70049.
An issue with Discovery Data Record (DDR) processing.

Hotfixes that are included in this update

@@ -38,8 +38,10 @@ item_type: Content source_path: intune/configmgr/hotfix/2603/39398030.md cmProducts: - https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/4c50f262-d533-4ba4-9d4a-08899ec3a3d1+- https://authoring-docs-microsoft.poolparty.biz/devrel/fcc3cd4a-59ea-47a2-9cc1-784142a5a25d spProducts: - https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/6a8c83be-f1de-4e90-bde0-bd097999a60c+- https://authoring-docs-microsoft.poolparty.biz/devrel/d7a55faf-a992-4e27-aa3a-eadc9830e778 platformId: 80f38da6-0710-8f1e-4570-80dea56adb77 --- @@ -53,7 +55,7 @@ This update supersedes [KB 38982839](38982839) and [KB 38232642](38232642) and i 
 - An issue with scripts.
 - An issue with the SMS Provider.
-- An issue with the Message Processing Engine.
+- An issue with the Message Processing Engine. This update addresses the elevation of privilege vulnerability described in [CVE-2026-70049](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70049).
 - An issue with Discovery Data Record (DDR) processing.
 
 ## Hotfixes that are included in this update