Skip to content
COOEY

EXPOSURES › CVE-2026-21525

CVE-2026-21525

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2026-02-10 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-21525 ↗
⌖ EXPLOITED IN THE WILD SHAME 72/100 exploited-in-wildunpatched

Microsoft Windows exposed to remote denial of service via NULL pointer dereference

A critical vulnerability in Microsoft Windows Remote Access Connection Manager allowed unauthorized attackers to deny service locally, as evidenced by active exploitation.

Shame score — Active exploitation indicates negligence in addressing a severe local denial of service vulnerability.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

DESCRIPTION

Microsoft Windows Remote Access Connection Manager contains a NULL pointer dereference that could allow an unauthorized attacker to deny service locally.

AFFECTED FEDRAMP PRODUCTS · 4
PRODUCTSTATUS
Azure Commercial Cloud
Microsoft
Authorized
Azure Government (includes Dynamics 365)
Microsoft
Authorized
Microsoft Office 365 GCC High
Microsoft
In Process
Office 365 Multi-Tenant & Supporting Services
Microsoft
Authorized