Back Cybersecuritynews

Windows Remote Desktop Services 0

Cybersecuritynews •Guru Baran • February 11, 2026

Microsoft has patched CVE-2026-21533, a zero-day elevation of privilege vulnerability in Windows Remote Desktop Services (RDS) that attackers are exploiting in the wild to gain SYSTEM-level access. The flaw stems from improper privilege management and was addressed in the February 2026 Patch Tuesday updates released on February 10. CVE-2026-21533 carries a CVSS v3.1 base score […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Patches Zero-Day Vulnerability in Remote Desktop Services Microsoft has addressed CVE-2026-21533, a zero-day elevation of privilege vulnerability in Windows Remote Desktop Services, which is being actively exploited by attackers to gain SYSTEM-level access. The flaw, resulting from improper privilege management, was patched in the February 2026 Patch Tuesday updates released on February 10, 2026. A public proof of concept (PoC) for this vulnerability was made available on February 11, 2026. 1 sources 45

Extracted Entities

Windows Remote Desktop Services 0

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

MITRE ATT&CK (1)

Platforms (1)