The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
This vulnerability is being actively exploited in the wild, according to the CISA Known Exploited Vulnerabilities catalog. CISA added it on .
CVE-2026-21533: Microsoft Windows Improper Privilege Management Vulnerability
- Identifier
- CVE-2026-21533
- Published
- Record updated
- Known exploitation
- Listed in the CISA Known Exploited Vulnerabilities catalog since February 10, 2026.
- EPSS
- 4.2%
Summary
Microsoft Windows Remote Desktop Services contains an improper privilege management vulnerability, tracked as CVE-2026-21533. An authorized attacker could exploit it to elevate privileges locally. The vulnerability is listed as actively exploited in the wild in CISA KEV.
Mitigation
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.