Constellation · CASCA

Constellation explorer

Every signal has a story.Follow the evidence.

Return to triage

Find a CVE by identifier or text

↵ select

Minimum eligible CVSSOrderKEV only

Start with evidence

Current exploration

CVE-2026-21519

Your trail

Where next?

Selected cve

CVE-2026-21519

Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

39 retained evidence references · snapshot-bound · open authoritative view

StateSource-scoped evidence

Priority69.3–75.0

Coverage93.1%

Connections30

Choose an action.

Evidence state

identity unresolved
known present
source constrained
evidence unknown

Snapshot-bound reason tuple

Last verified source snapshot retainedfactor_a_kev

The admitted source contract constrains coverage for this claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: Review source contract

Evidence supportedfactor_b_epss

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: None

Evidence supportedfactor_c_cvss

Eligible evidence is present for this bounded claim.

Revision: casca-direct-cvss-eligibility-v1
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: None

Source-reported scopefactor_d_breadth

The source assertion is retained, but its canonical identity is unresolved.

Revision: casca-factor-d-obligations-v1
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: Resolve identity

Connections 30

has cited scope1 retained · stored CVE-2026-21519 → Microsoft · Windows Server 2022

89472ee1-1cc4-4ff4-9105-3310bc004015

has cited scope1 retained · stored CVE-2026-21519 → Microsoft · Windows Server 2022, 23H2 Edition (Server Core installation)

d0936a37-90a8-4e76-b2e7-852312b05095

has cited scope1 retained · stored CVE-2026-21519 → Microsoft · Windows 11 Version 24H2

9c6f8aa8-3079-4249-bd88-ea7c91462617

has cited scope1 retained · stored CVE-2026-21519 → Microsoft · Windows 11 version 22H3

115f0540-4222-4f6c-93e3-e15b95d04726

has cited scope1 retained · stored CVE-2026-21519 → Microsoft · Windows 11 Version 23H2

064b152c-bb24-4160-bea6-ca4e9947cb85

has cited scope1 retained · stored CVE-2026-21519 → Microsoft · Windows Server 2016

6f2feac4-6cc3-4d97-8a97-d044eea1c2ed

has cited scope1 retained · stored CVE-2026-21519 → Microsoft · Windows 11 Version 26H1

1e94d5c1-9105-49c8-9316-0188f63cf514

has cited scope1 retained · stored CVE-2026-21519 → Microsoft · Windows Server 2025 (Server Core installation)

fedaa58d-9a69-40f3-8506-660d1403f3ba

has cited scope1 retained · stored CVE-2026-21519 → Microsoft · Windows Server 2016 (Server Core installation)

db03b312-e1b5-41e3-a17b-e6424c10d3a4

has cited scope1 retained · stored CVE-2026-21519 → Microsoft · Windows 11 version 26H1

f5d2304a-6922-46cd-9fd2-06867be79b86

has cited scope1 retained · stored CVE-2026-21519 → Microsoft · Windows 10 Version 1809

59bb7c60-6f12-4762-bf1c-7b8c5a114f84

has cited scope1 retained · stored CVE-2026-21519 → Microsoft · Windows Server 2025

b70c1bb1-4330-4060-809b-b5cc943964d8

has cited scope1 retained · stored CVE-2026-21519 → Microsoft · Windows 10 Version 22H2

6b3f676d-5140-40be-bd35-f2a2d428507a

has cited scope1 retained · stored CVE-2026-21519 → Microsoft · Windows 10 Version 21H2

6e3dcda1-1a2b-4ef8-911c-43e2ec359dad

has cited scope1 retained · stored CVE-2026-21519 → Microsoft · Windows Server 2019

319771ec-2c15-4a56-bc42-d9f0d68f7880

has cited scope1 retained · stored CVE-2026-21519 → Microsoft · Windows 10 Version 1607

ae255121-37de-480d-97a3-a53125b2421e

has cited scope1 retained · stored CVE-2026-21519 → Microsoft · Windows Server 2019 (Server Core installation)

24e65fc0-33ed-4b17-b902-8c6ac70652be

has cited scope1 retained · stored CVE-2026-21519 → Microsoft · Windows 11 Version 25H2

ae9a0677-0437-4582-81cf-51fc758aa194

has vulnerable target scope2 retained · stored CVE-2026-21519 → microsoft · windows_11_23h2

4b4eaf5d-50a5-44d3-9541-6a0d5ec8e673ddafbdc8-1df0-4c9b-a24a-ba82365edfb2

has vulnerable target scope1 retained · stored CVE-2026-21519 → microsoft · windows_server_2016

5003001e-66e5-475d-bad0-af62e0c2c32b

has vulnerable target scope1 retained · stored CVE-2026-21519 → microsoft · windows_server_2019

13f030df-adc6-408e-83fe-076cda57f10e

has vulnerable target scope1 retained · stored CVE-2026-21519 → microsoft · windows_server_2025

fa45ae99-d499-4c22-ad8a-907ba6aae4fa

has vulnerable target scope2 retained · stored CVE-2026-21519 → microsoft · windows_10_1607

0e98b174-8eda-4307-a2e7-999830fe2ae5f350b54a-8662-47a3-93ef-1cda3fd982ad

has vulnerable target scope2 retained · stored CVE-2026-21519 → microsoft · windows_11_24h2

9da98ee4-1b0d-42bb-afd3-dd5c9ae0a801ef2972fd-bad3-4a49-ae65-7bbe8eb53dbc

has vulnerable target scope2 retained · stored CVE-2026-21519 → microsoft · windows_10_1809

6854b29b-1203-416e-a88c-754bc395210591ab3363-3096-49bd-93b2-afe7d0f1ae31

has vulnerable target scope3 retained · stored CVE-2026-21519 → microsoft · windows_10_22h2

4ceb71c9-19a0-4716-9f7a-553d99ae792d8d09b008-13db-4cbb-9e58-4450af3c0610bee5284d-ddd5-41e2-b60c-3859e6362f1d

has vulnerable target scope1 retained · stored CVE-2026-21519 → microsoft · windows_server_2022_23h2

dc990261-dd31-4ecd-80ee-87bd4cf7cdec

has vulnerable target scope1 retained · stored CVE-2026-21519 → microsoft · windows_server_2022

0818b55e-027c-4265-8870-22472defd1d6

has vulnerable target scope2 retained · stored CVE-2026-21519 → microsoft · windows_11_25h2

bc66b275-07ff-40ed-893f-4ab22bb99eaaf86c7620-aeb9-40c7-a640-ac232353a281

has vulnerable target scope3 retained · stored CVE-2026-21519 → microsoft · windows_10_21h2

a802098a-b8a8-4e2f-a906-fe581b6f8e14d6bff98b-f76d-44e1-9628-a5840907a614fbb8d7fa-3e88-413a-b26f-5385c537b095

Focused snapshot evidence neighborhood.

CVEProductSignalSelected / traceVisual proximity carries zero evidence weight.

Data as of

Evidence current through Oct 22, 2026, 6:07 PM UTC · 31 entities · 30 relationships · bounded complete