Every CVE Search/ Get API key

CVE-2026-21525

Windows Remote Access Connection Manager Denial of Service Vulnerability

6.2 MediumIn KEV

Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

5.04%Down 3.5 points since Feb 11, 2026
90%50%10%1%

What each source reports

CVE List Score used 6.2

Windows Remote Access Connection Manager Denial of Service Vulnerability

Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally.

Record
CVE-2026-21525
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Weakness
CWE-476
Updated
2026-11-02
EUVDEUVD-2026-7329 6.2

Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally.

Record
EUVD-2026-7329
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Updated
2026-11-02
GitHub AdvisoriesGHSA-cf8p-vhmm-h7g6 6.2

Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized...

Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally.

Record
GHSA-cf8p-vhmm-h7g6
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
CISA KEV No score

Microsoft Windows NULL Pointer Dereference Vulnerability

Microsoft Windows Remote Access Connection Manager contains a NULL pointer dereference that could allow an unauthorized attacker to deny service locally.

Record
CVE-2026-21525
Weakness
CWE-476
Updated
2026-11-02
NVD 6.2

Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally.

Record
CVE-2026-21525
CVSS 3.1
6.2 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02

Affected products

Show 18 moreShow less

History

History
RecordedChangedSources
exploitation
first indexedCVE List, EUVD, GitHub Advisories, CISA KEV, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-21525 is a medium vulnerability (CVSS 6.2) in Microsoft Windows, published February 10, 2026. CISA lists it as known to be exploited, since February 10, 2026. EUVD reports exploitation since February 10, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.04%, the 92nd percentile. No source names a fixed version.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open