A AegiFlow
UNKNOWNKNOWN EXPLOITED

CVE-2026-21533

Microsoft Windows Improper Privilege Management Vulnerability

Published
2026-02-10
Modified
2026-07-31
Sources
cisa-kev

Summary

Microsoft Windows Remote Desktop Services contains an improper privilege management vulnerability that could allow an authorized attacker to elevate privileges locally.

References

Includes data from the CISA Known Exploited Vulnerabilities catalog.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.