CVE-2026-21533
HIGHCVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
4Description
Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.
Analysis
Windows Remote Desktop contains an improper privilege management vulnerability (CVE-2026-21533, CVSS 7.8) enabling authorized local attackers to escalate to SYSTEM. KEV-listed, this vulnerability in the RDP subsystem is particularly concerning in environments where Remote Desktop is widely used, as it can be chained with RDP session access for complete system compromise.
Sign in for full analysis, threat intelligence, and remediation guidance.
Remediation
Within 24 hours: Identify and inventory all systems running vulnerable Windows Remote Desktop versions; disable RDP on non-essential systems and restrict RDP access to specific administrative users and IP ranges. Within 7 days: Implement network segmentation to isolate RDP traffic; deploy enhanced monitoring and alerting for RDP sessions and privilege escalation attempts; conduct account audits for unauthorized administrative access. …
Sign in for detailed remediation steps.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today