EXPOSURES › CVE-2026-21533
CVE-2026-21533
HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
⚡ RCE
⌖ EXPLOITED IN THE WILD
SHAME 72/100
exploited-in-wildunpatched
Authorized attackers could elevate privileges locally in Microsoft Windows due to an improper privilege management vulnerability.
An unpatched vulnerability in Microsoft Windows Remote Desktop Services allowed authorized attackers to elevate their privileges locally, posing a high security risk.
Shame score — Authorized attackers could exploit an unpatched vulnerability to elevate privileges locally, leading to a high security risk.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
PLAYERS IMPLICATED
DESCRIPTION
Microsoft Windows Remote Desktop Services contains an improper privilege management vulnerability that could allow an authorized attacker to elevate privileges locally.
AFFECTED FEDRAMP PRODUCTS · 4
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |