Constellation · CASCA

Constellation explorer

Every signal has a story.Follow the evidence.

Return to triage

Find a CVE by identifier or text

↵ select

Minimum eligible CVSSOrderKEV only

Start with evidence

Current exploration

CVE-2026-21513

Your trail

Where next?

Selected cve

CVE-2026-21513

Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network.

45 retained evidence references · snapshot-bound · open authoritative view

StateSource-scoped evidence

Priority76.8–82.7

Coverage92.7%

Connections35

Choose an action.

Evidence state

identity unresolved
known present
source constrained
evidence unknown

Snapshot-bound reason tuple

Last verified source snapshot retainedfactor_a_kev

The admitted source contract constrains coverage for this claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: Review source contract

Evidence supportedfactor_b_epss

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: None

Evidence supportedfactor_c_cvss

Eligible evidence is present for this bounded claim.

Revision: casca-direct-cvss-eligibility-v1
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: None

Source-reported scopefactor_d_breadth

The source assertion is retained, but its canonical identity is unresolved.

Revision: casca-factor-d-obligations-v1
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: Resolve identity

Connections 35

has cited scope1 retained · stored CVE-2026-21513 → Microsoft · Windows Server 2022

269ef3fe-694c-444e-8fe5-c0fc3e2412c1

has cited scope1 retained · stored CVE-2026-21513 → Microsoft · Windows Server 2022, 23H2 Edition (Server Core installation)

2064ad0d-a64b-4ffc-b512-c2dd5c765902

has cited scope1 retained · stored CVE-2026-21513 → Microsoft · Windows 11 Version 24H2

fad368ea-9259-4afb-88bf-c04035184ec1

has cited scope1 retained · stored CVE-2026-21513 → Microsoft · Windows 11 version 22H3

009f989f-7c5a-4f21-b089-fb97e406236a

has cited scope1 retained · stored CVE-2026-21513 → Microsoft · Windows 11 Version 23H2

2ed86247-e1b2-41b1-8530-285a23a8babe

has cited scope1 retained · stored CVE-2026-21513 → Microsoft · Windows Server 2016

155fec78-3583-4901-8d89-e3a049011fc7

has cited scope1 retained · stored CVE-2026-21513 → Microsoft · Windows 11 Version 26H1

20c75465-8d29-4235-9f92-78c36a5eff7f

has cited scope1 retained · stored CVE-2026-21513 → Microsoft · Windows Server 2012

49a4d5ab-2c10-4ec4-8475-62ab1100743a

has cited scope1 retained · stored CVE-2026-21513 → Microsoft · Windows Server 2025 (Server Core installation)

80293166-7f85-4b60-bafc-b477b300b112

has cited scope1 retained · stored CVE-2026-21513 → Microsoft · Windows Server 2012 (Server Core installation)

7ac5e884-04f3-4125-a173-1348af98224a

has cited scope1 retained · stored CVE-2026-21513 → Microsoft · Windows Server 2016 (Server Core installation)

b4314d53-4b95-4da6-acba-222e3670b612

has cited scope1 retained · stored CVE-2026-21513 → Microsoft · Windows Server 2012 R2 (Server Core installation)

b251516c-604d-4446-bae6-4084becad719

has cited scope1 retained · stored CVE-2026-21513 → Microsoft · Windows 11 version 26H1

39974101-9d78-46d3-be4d-547d403bf747

has cited scope1 retained · stored CVE-2026-21513 → Microsoft · Windows 10 Version 1809

fc629832-63cf-4e73-9d24-ae215b05885b

has cited scope1 retained · stored CVE-2026-21513 → Microsoft · Windows Server 2025

1468839f-62d0-4bcc-a5d8-ecdcc9a11b8b

has cited scope1 retained · stored CVE-2026-21513 → Microsoft · Windows 10 Version 22H2

56d82078-4f94-4422-a9aa-92b59be5f3bc

has cited scope1 retained · stored CVE-2026-21513 → Microsoft · Windows 10 Version 21H2

7be7b996-7dfa-424b-80a5-8c0bc7e2a084

has cited scope1 retained · stored CVE-2026-21513 → Microsoft · Windows Server 2019

a17abf20-385b-47ec-9d80-645dbb6f2475

has cited scope1 retained · stored CVE-2026-21513 → Microsoft · Windows 10 Version 1607

d1a4bf44-ba3c-4f17-a127-db0696864fc3

has cited scope1 retained · stored CVE-2026-21513 → Microsoft · Windows Server 2012 R2

17d6597f-412e-4d2e-a975-95faabac37b9

has cited scope1 retained · stored CVE-2026-21513 → Microsoft · Windows Server 2019 (Server Core installation)

590c89af-5767-410d-86b2-ad035e879238

has cited scope1 retained · stored CVE-2026-21513 → Microsoft · Windows 11 Version 25H2

e2f239be-f167-48f8-8f6b-12bd7695c1f0

has vulnerable target scope2 retained · stored CVE-2026-21513 → microsoft · windows_11_23h2

07c05cbc-d071-4945-895f-852ae012f8d673adf85d-3ee7-4b3e-9f43-c5296b480e9c

has vulnerable target scope1 retained · stored CVE-2026-21513 → microsoft · windows_server_2016

b351fa0b-6f44-4c4e-aeec-dedb763288ef

has vulnerable target scope1 retained · stored CVE-2026-21513 → microsoft · windows_server_2019

0c05a2f4-3576-495f-8444-5f5302ecb55f

has vulnerable target scope1 retained · stored CVE-2026-21513 → microsoft · windows_server_2025

6476b8ad-569d-406c-8fec-378ddf88a054

has vulnerable target scope2 retained · stored CVE-2026-21513 → microsoft · windows_server_2012

6f8b56e1-0717-44f6-9b27-3e91256933a470c395e3-646b-4238-b599-d3a0413ca275

has vulnerable target scope2 retained · stored CVE-2026-21513 → microsoft · windows_10_1607

167bc8ca-e44f-487b-9c2a-319c14b9ecf63741c2cc-67ef-475c-bc3d-02923f0af215

has vulnerable target scope2 retained · stored CVE-2026-21513 → microsoft · windows_11_24h2

62b96c6b-122f-4ca4-9050-dd3e44d0071d8b9f08d6-add1-4e89-9a39-7f304f517767

has vulnerable target scope2 retained · stored CVE-2026-21513 → microsoft · windows_10_1809

81107b0e-a5d4-4ddf-a6aa-fbeeeed339fdb89f7404-d461-42e0-8e5f-2741f1fb290f

has vulnerable target scope3 retained · stored CVE-2026-21513 → microsoft · windows_10_22h2

1947df54-7a6f-4f50-a7e5-2a57176b51204ad7e7c4-9f82-4cff-a0e2-7feb6d36523369c7c9c3-c44f-4bb2-ac04-d52c28a504d8

has vulnerable target scope1 retained · stored CVE-2026-21513 → microsoft · windows_server_2022_23h2

1f2d61bb-fcaf-433a-92ae-a51f6fb371e4

has vulnerable target scope1 retained · stored CVE-2026-21513 → microsoft · windows_server_2022

a7bec7b7-d8b9-4a5a-a534-aa032621144f

has vulnerable target scope2 retained · stored CVE-2026-21513 → microsoft · windows_11_25h2

17981eb9-0ea2-4182-ab41-0bb49f2326fe32632b40-9f3b-454f-98f2-6006951b43c9

has vulnerable target scope3 retained · stored CVE-2026-21513 → microsoft · windows_10_21h2

78d46809-bb78-4dc0-9506-a0e144464ce79ab71778-00f8-42fe-89b7-9311c7dae1ceb2afbe84-1c64-4f35-b5e8-62c6f44870c4

Focused snapshot evidence neighborhood.

CVEProductSignalSelected / traceVisual proximity carries zero evidence weight.

Data as of

Evidence current through Oct 22, 2026, 6:07 PM UTC · 36 entities · 35 relationships · bounded complete