Constellation · CASCA

Constellation explorer

Every signal has a story.Follow the evidence.

Return to triage

Find a CVE by identifier or text

↵ select

Minimum eligible CVSSOrderKEV only

Start with evidence

Current exploration

CVE-2026-21525

Your trail

Where next?

Selected cve

CVE-2026-21525

Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally.

45 retained evidence references · snapshot-bound · open authoritative view

StateSource-scoped evidence

Priority66.7–72.7

Coverage92.7%

Connections35

Choose an action.

Evidence state

identity unresolved
known present
source constrained
evidence unknown

Snapshot-bound reason tuple

Last verified source snapshot retainedfactor_a_kev

The admitted source contract constrains coverage for this claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: Review source contract

Evidence supportedfactor_b_epss

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: None

Evidence supportedfactor_c_cvss

Eligible evidence is present for this bounded claim.

Revision: casca-direct-cvss-eligibility-v1
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: None

Source-reported scopefactor_d_breadth

The source assertion is retained, but its canonical identity is unresolved.

Revision: casca-factor-d-obligations-v1
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: Resolve identity

Connections 35

has cited scope1 retained · stored CVE-2026-21525 → Microsoft · Windows Server 2022

b8b525c4-969f-411f-8f88-e210ce27ea41

has cited scope1 retained · stored CVE-2026-21525 → Microsoft · Windows Server 2022, 23H2 Edition (Server Core installation)

9358f509-f5b7-4875-845e-344c0817bb85

has cited scope1 retained · stored CVE-2026-21525 → Microsoft · Windows 11 Version 24H2

bf60c0c9-2ec2-4ec9-858d-a82a5628e2e6

has cited scope1 retained · stored CVE-2026-21525 → Microsoft · Windows 11 version 22H3

d528378f-a4f0-4fcb-8146-0f65e5714e90

has cited scope1 retained · stored CVE-2026-21525 → Microsoft · Windows 11 Version 23H2

412d6e6d-ebd8-4d66-ae81-84e80a7c7626

has cited scope1 retained · stored CVE-2026-21525 → Microsoft · Windows Server 2016

514da843-f1ad-4967-97bd-bf317bfdae8a

has cited scope1 retained · stored CVE-2026-21525 → Microsoft · Windows 11 Version 26H1

54ccbb5b-c349-46f2-a786-7216be9f1ed6

has cited scope1 retained · stored CVE-2026-21525 → Microsoft · Windows Server 2012

b479329d-6345-48e3-8e7c-7aa9a12fb5f7

has cited scope1 retained · stored CVE-2026-21525 → Microsoft · Windows Server 2025 (Server Core installation)

5afee0a6-b71c-4f08-aab9-3a81c60a6b4e

has cited scope1 retained · stored CVE-2026-21525 → Microsoft · Windows Server 2012 (Server Core installation)

ef551f8e-b396-416a-a6e1-f428b1f6a4e8

has cited scope1 retained · stored CVE-2026-21525 → Microsoft · Windows Server 2016 (Server Core installation)

4a74ab40-b6a8-488a-9ef3-438800664989

has cited scope1 retained · stored CVE-2026-21525 → Microsoft · Windows Server 2012 R2 (Server Core installation)

8c5647e8-4ebd-4aab-bfed-10feb138f8fc

has cited scope1 retained · stored CVE-2026-21525 → Microsoft · Windows 11 version 26H1

01a061ea-47d7-4aa3-a05e-8e1ad15a44a9

has cited scope1 retained · stored CVE-2026-21525 → Microsoft · Windows 10 Version 1809

afe67d1d-8f26-44d2-bed8-7d0d74cda725

has cited scope1 retained · stored CVE-2026-21525 → Microsoft · Windows Server 2025

0e7eee61-b334-41d2-95d6-fbc8c21a8c40

has cited scope1 retained · stored CVE-2026-21525 → Microsoft · Windows 10 Version 22H2

afc5b991-f666-46ea-9fe9-98df4cfde26e

has cited scope1 retained · stored CVE-2026-21525 → Microsoft · Windows 10 Version 21H2

62b257e2-2cd6-4dae-838c-a3b432ec4316

has cited scope1 retained · stored CVE-2026-21525 → Microsoft · Windows Server 2019

8965d9dd-b10b-47fc-9530-f643105da053

has cited scope1 retained · stored CVE-2026-21525 → Microsoft · Windows 10 Version 1607

c5599093-c7dc-45d4-aeaa-d12e5a412c83

has cited scope1 retained · stored CVE-2026-21525 → Microsoft · Windows Server 2012 R2

435d2bc5-5b7b-48fd-83e8-bbbf73868adb

has cited scope1 retained · stored CVE-2026-21525 → Microsoft · Windows Server 2019 (Server Core installation)

b0b35aef-a9cb-46aa-9009-b7b8940e318b

has cited scope1 retained · stored CVE-2026-21525 → Microsoft · Windows 11 Version 25H2

73823291-857a-4790-bdaf-00323b98587f

has vulnerable target scope2 retained · stored CVE-2026-21525 → microsoft · windows_11_23h2

89dc2342-82a5-41f2-be70-61323d33fdbaadd3efb8-864d-4154-9a6c-782810159d03

has vulnerable target scope1 retained · stored CVE-2026-21525 → microsoft · windows_server_2016

c517d58d-159c-4ee8-af8f-6e148b02d50f

has vulnerable target scope1 retained · stored CVE-2026-21525 → microsoft · windows_server_2019

d26b9fef-1bb3-40fb-98af-776e08559210

has vulnerable target scope1 retained · stored CVE-2026-21525 → microsoft · windows_server_2025

71934e1a-230a-42ae-bfcd-61f550679742

has vulnerable target scope2 retained · stored CVE-2026-21525 → microsoft · windows_server_2012

6474e650-7982-45a0-95b5-f0dd25f96fe48ecfb4b2-6d8e-4366-82b7-292ed556795e

has vulnerable target scope2 retained · stored CVE-2026-21525 → microsoft · windows_10_1607

77bdc53f-ab5a-47a1-b523-c395c278c671fedf00cf-4f27-40b3-9d91-614c0afb9ad0

has vulnerable target scope2 retained · stored CVE-2026-21525 → microsoft · windows_11_24h2

1ace387b-309e-4f34-b769-71c46bbd29d5e573d844-fc19-4ccd-b474-7855e475ae9a

has vulnerable target scope2 retained · stored CVE-2026-21525 → microsoft · windows_10_1809

93e1d9cc-2943-4cbe-9a03-9eaa4017d9cab76259ed-9a52-433c-9daf-f4beb4352c4c

has vulnerable target scope3 retained · stored CVE-2026-21525 → microsoft · windows_10_22h2

462e7ce9-6215-4a98-9a6d-3be967dc152aa61f49a4-9ba6-47c3-aba0-8dc2f80732dbb77a4507-5ba7-464f-bc8d-88a7201ba7f3

has vulnerable target scope1 retained · stored CVE-2026-21525 → microsoft · windows_server_2022_23h2

6fd704fd-db05-423c-a92e-c53db423ed93

has vulnerable target scope1 retained · stored CVE-2026-21525 → microsoft · windows_server_2022

bb5ae17a-2376-4fa2-8f02-6f92aa94ef2a

has vulnerable target scope2 retained · stored CVE-2026-21525 → microsoft · windows_11_25h2

3131fc5a-c5e3-4ced-a18c-98dc3dc54afbcb9afe0a-2639-4ce7-8558-e4c534106d07

has vulnerable target scope3 retained · stored CVE-2026-21525 → microsoft · windows_10_21h2

83909d49-13c8-49d1-8710-9a7a4699f1ec9238f146-ea86-4de2-baf0-533a544e0100dd4ae013-6630-470b-a391-e9df07e61ae3

Focused snapshot evidence neighborhood.

CVEProductSignalSelected / traceVisual proximity carries zero evidence weight.

Data as of

Evidence current through Oct 22, 2026, 6:07 PM UTC · 36 entities · 35 relationships · bounded complete