Summary
Impact: Denial of Service. Microsoft rating: Moderate. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.
Details
Security updates
10.0.17763.8389 — https://support.microsoft.com/help/5075904
10.0.20348.4773 — https://support.microsoft.com/help/5075906
10.0.20348.4711 — https://support.microsoft.com/help/5075943
10.0.19044.6937 — https://support.microsoft.com/help/5075912
10.0.26100.32370 — https://support.microsoft.com/help/5075899
10.0.26100.32313 — https://support.microsoft.com/help/5075942
10.0.26200.7840 — https://support.microsoft.com/help/5077181
10.0.26200.7781 — https://support.microsoft.com/help/5077212
10.0.22631.6649 — https://support.microsoft.com/help/5075941
10.0.25398.2149 — https://support.microsoft.com/help/5075897
10.0.14393.8868 — https://support.microsoft.com/help/5075999
6.2.9200.25923 — https://support.microsoft.com/help/5075971
6.3.9600.23022 — https://support.microsoft.com/help/5075970
10.0.28000.1575 — https://support.microsoft.com/help/5077179
Vulnerabilities 1
-
Medium 6.2CVE-2026-21525 Exploited
Windows Remote Access Connection Manager Denial of Service Vulnerability
Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally.
KEV Feb 10, 2026
Revision history
-
#1
Information published.
References
-
CVE-2026-21525 Windows Remote Access Connection Manager Denial of Service Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21525
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss