The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows attackers to escalate their privileges.

🗓️ 11 Feb 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

The Remote Desktop Services vulnerability in Windows allows privilege escalation via insecure privilege management.

Reporter	Title	Published	Views	Family All 56
GithubExploit	Exploit for CVE-2026-21533	11 Feb 202612:58	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Microsoft	11 Feb 202621:03	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Microsoft	9 Mar 202621:07	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Microsoft	20 Feb 202622:00	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Microsoft	20 Feb 202616:17	–	githubexploit
ATTACKERKB	CVE-2026-21533	10 Feb 202617:51	–	attackerkb
Information Security Automation	March "In the Trend of VM" (#25): once again, vulnerabilities are only in Microsoft products	22 Mar 202609:00	–	avleonov
Information Security Automation	February Microsoft Patch Tuesday	11 Feb 202611:08	–	avleonov
Information Security Automation	About Elevation of Privilege - Windows RDS (CVE-2026-21533) vulnerability	12 Mar 202609:06	–	avleonov
Circl	CVE-2026-21533	10 Feb 202617:30	–	circl

Vulners

Node

microsoft windows_11_26h1Range<10.0.28000.1575

OR

microsoft windows_server_2012_r2_(server_core_installation)Range<6.3.9600.23022

OR

microsoft windows_server_2012_r2Range<6.3.9600.23022

OR

microsoft windows_server_2012_(server_core_installation)Range<6.2.9200.25923

OR

microsoft windows_server_2012Range<6.2.9200.25923

OR

microsoft windows_server_2016_(server_core_installation)Range<10.0.14393.8868

OR

microsoft windows_server_2016Range<10.0.14393.8868

OR

microsoft windows_10_1607Range<10.0.14393.8868

OR

microsoft windows_server_2025Range<10.0.26100.32370

OR

microsoft windows_server_2025Range<10.0.26100.32313

OR

microsoft windows_11_24h2Range<10.0.26100.7840

OR

microsoft windows_11_24h2Range<10.0.26100.7781

OR

microsoft windows_server_2022,_23h2_edition_(server_core_installation)Range<10.0.25398.2149

OR

microsoft windows_11_23h2Range<10.0.22631.6649

OR

microsoft windows_11_25h2Range<10.0.26200.7840

OR

microsoft windows_11_25h2Range<10.0.26200.7781

OR

microsoft windows_server_2025_(server_core_installation)Range<10.0.26100.32370

OR

microsoft windows_server_2025_(server_core_installation)Range<10.0.26100.32313

OR

microsoft windows_10_22h2Range<10.0.19045.6937

OR

microsoft windows_10_21h2Range<10.0.19044.6937

OR

microsoft windows_server_2022_(server_core_installation)Range<10.0.20348.4773

OR

microsoft windows_server_2022_(server_core_installation)Range<10.0.20348.4711

OR

microsoft windows_server_2022Range<10.0.20348.4773

OR

microsoft windows_server_2022Range<10.0.20348.4711

OR

microsoft windows_server_2019_(server_core_installation)Range<10.0.17763.8389

OR

microsoft windows_server_2019Range<10.0.17763.8389

OR

microsoft windows_10_1809Range<10.0.17763.8389

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21533
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
web	www.web.nvd.nist.gov/view/vuln/detail

01 Jun 2026 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 26.8

CVSS 37.8

EPSS0.03846

Remote Desktop Services Windows operating system Privilege escalation Insecure privilege management