CVE-2026-21533 — Microsoft Windows Improper Privilege Management Vulnerability

Description

Microsoft Windows Remote Desktop Services contains an improper privilege management vulnerability that could allow an authorized attacker to elevate privileges locally.

How to fix CVE-2026-21533

No package mapping is available — consult the references below for vendor-specific guidance.

Is CVE-2026-21533 being exploited?

Yes — CVE-2026-21533 is on the CISA Known Exploited Vulnerabilities (KEV) catalog. Patch immediately.

Affected packages (0)

No package mapping in OSV.