cve detail

CVE-2026-21533

naam

Microsoft Windows Improper Privilege Management Vulnerability

Microsoft Windows Remote Desktop Services contains an improper privilege management vulnerability that could allow an authorized attacker to elevate privileges locally.

KEV

bekend misbruikt

EPSS

20%

percentiel

96%

vendor

Microsoft

product

Windows

toegevoegd aan KEV

10 feb 2026

due date

03 mrt 2026

ransomware

Unknown

CWE

CWE-269

EPSS datum

12 mei 2026

aanbevolen actie

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

notities

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21533 ; https://nvd.nist.gov/vuln/detail/CVE-2026-21533