Critical SEVERITY — Vulnerability

CVE-2026-21519 — Microsoft Windows Type Confusion Vulnerability

Microsoft Desktop Windows Manager contains a type confusion vulnerability that could allow an authorized attacker to elevate privileges locally.

Platform
Windows Server
CVE Record
CVE-2026-21519
Advisory
CISA-KEV
Published
10 February 2026
Views
39
Primary source: Review the official advisory at nvd.nist.gov Go to Source

Status

Bu açık CISA tarafından aktif istismar edildiği doğrulanmış açıklar katalogunda yer alıyor. Teorik bir risk değil — sahada kullanılıyor.

Description

Microsoft Desktop Windows Manager contains a type confusion vulnerability that could allow an authorized attacker to elevate privileges locally.

Details

  • Vendor: Microsoft
  • Product: Windows
  • Katalog'a eklenme: 2026-02-10

CISA'nın Zorunlu Kıldığı Aksiyon

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  • Due date for federal agencies: 2026-03-03
Microsoft Windows

Windows Server — Related Advisories

VIEW ALL →