Back Cybersecuritynews

Windows Remote Access Connection Manager 0

Cybersecuritynews •Abinaya • February 11, 2026

Microsoft has patched a zero-day vulnerability in the Windows Remote Access Connection Manager (RasMan) service, tracked as CVE-2026-21525, which allowed attackers to trigger denial-of-service (DoS) conditions on unpatched systems. The flaw, stemming from a NULL pointer dereference (CWE-476), was actively exploited in the wild before disclosure, earning an “Exploitation Detected” rating from Microsoft’s MSRC exploitability […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Patches Zero-Day Vulnerability in Windows RasMan Service Microsoft has addressed a zero-day vulnerability in the Windows Remote Access Connection Manager (RasMan) service, identified as CVE-2026-21525. This flaw, which allowed attackers to cause denial-of-service conditions on unpatched systems, was actively exploited prior to its disclosure. The vulnerability is linked to a NULL pointer dereference issue. 3 sources 27

Extracted Entities

Windows Remote Access Connection Manager 0

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)