Product:
Windows Remote Desktop
Summary
Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally. This vulnerability can lead to significant security risks if exploited. Attackers with local access can gain higher privileges than intended, potentially compromising the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2026-21533 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the system running Windows Remote Desktop. Once access is gained, the attacker can leverage the improper privilege management to elevate their privileges, allowing them to perform unauthorized actions on the system.
Affected Products
- Windows Remote Desktop: A service that allows users to connect to another computer over a network connection.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Additionally, restricting local access to trusted users and monitoring for unusual activity can help reduce the risk of exploitation.