Constellation · CASCA

Constellation explorer

Every signal has a story.Follow the evidence.

Return to triage

Find a CVE by identifier or text

↵ select

Minimum eligible CVSSOrderKEV only

Start with evidence

Current exploration

CVE-2026-21533

Your trail

Where next?

Selected cve

CVE-2026-21533

Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

45 retained evidence references · snapshot-bound · open authoritative view

StateSource-scoped evidence

Priority70.4–76.3

Coverage92.7%

Connections35

Choose an action.

Evidence state

identity unresolved
known present
source constrained
evidence unknown

Snapshot-bound reason tuple

Last verified source snapshot retainedfactor_a_kev

The admitted source contract constrains coverage for this claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: Review source contract

Evidence supportedfactor_b_epss

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: None

Evidence supportedfactor_c_cvss

Eligible evidence is present for this bounded claim.

Revision: casca-direct-cvss-eligibility-v1
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: None

Source-reported scopefactor_d_breadth

The source assertion is retained, but its canonical identity is unresolved.

Revision: casca-factor-d-obligations-v1
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: Resolve identity

Connections 35

has cited scope1 retained · stored CVE-2026-21533 → Microsoft · Windows Server 2022

5dce1751-8b0c-4f96-8007-80c5d468317f

has cited scope1 retained · stored CVE-2026-21533 → Microsoft · Windows Server 2022, 23H2 Edition (Server Core installation)

5d95bd18-66ad-4d18-a992-e1a21bbc6eb5

has cited scope1 retained · stored CVE-2026-21533 → Microsoft · Windows 11 Version 24H2

17d425f0-861a-485e-b84d-c570f81a8050

has cited scope1 retained · stored CVE-2026-21533 → Microsoft · Windows 11 version 22H3

e64dd683-b83b-4af1-96b5-898dd6e0c0f1

has cited scope1 retained · stored CVE-2026-21533 → Microsoft · Windows 11 Version 23H2

36d6a328-eefe-45e4-ba2c-9d3f97f89695

has cited scope1 retained · stored CVE-2026-21533 → Microsoft · Windows Server 2016

94fb5e63-26cd-49f4-9fde-b46820fce2aa

has cited scope1 retained · stored CVE-2026-21533 → Microsoft · Windows 11 Version 26H1

3db1e2a2-4abe-4bbc-92f6-319bea24bd91

has cited scope1 retained · stored CVE-2026-21533 → Microsoft · Windows Server 2012

d7c8e94a-3191-4cb6-a7ef-8f049ff16a00

has cited scope1 retained · stored CVE-2026-21533 → Microsoft · Windows Server 2025 (Server Core installation)

0b2bf363-89e4-4963-939b-6d0ffa0bc0a5

has cited scope1 retained · stored CVE-2026-21533 → Microsoft · Windows Server 2012 (Server Core installation)

adfb0d5c-9283-4fc3-8ad9-9c72aecdc6d5

has cited scope1 retained · stored CVE-2026-21533 → Microsoft · Windows Server 2016 (Server Core installation)

14ff5f7c-29aa-4183-b536-7c39c168e7d2

has cited scope1 retained · stored CVE-2026-21533 → Microsoft · Windows Server 2012 R2 (Server Core installation)

6b963f33-f5da-4e2c-bf42-377757bed886

has cited scope1 retained · stored CVE-2026-21533 → Microsoft · Windows 11 version 26H1

be47a2f3-b511-4686-b263-1dde60a22330

has cited scope1 retained · stored CVE-2026-21533 → Microsoft · Windows 10 Version 1809

97b31008-156a-405f-9fdc-f7bf46bc694e

has cited scope1 retained · stored CVE-2026-21533 → Microsoft · Windows Server 2025

e2402e0c-8846-4710-8548-45db5cd99e39

has cited scope1 retained · stored CVE-2026-21533 → Microsoft · Windows 10 Version 22H2

29b0aed6-0549-4e02-ac35-54a2bef5ccf6

has cited scope1 retained · stored CVE-2026-21533 → Microsoft · Windows 10 Version 21H2

809a7531-9c06-4aca-a9ed-0c658ee62cf6

has cited scope1 retained · stored CVE-2026-21533 → Microsoft · Windows Server 2019

b7e4a105-55f3-4e66-8289-27a949b12a3e

has cited scope1 retained · stored CVE-2026-21533 → Microsoft · Windows 10 Version 1607

72fee610-a827-42df-afb5-cb1ad39094dd

has cited scope1 retained · stored CVE-2026-21533 → Microsoft · Windows Server 2012 R2

68f868c9-5e9a-48c3-891c-7eaafc778a79

has cited scope1 retained · stored CVE-2026-21533 → Microsoft · Windows Server 2019 (Server Core installation)

48004807-8db0-4737-90ca-64a2753addca

has cited scope1 retained · stored CVE-2026-21533 → Microsoft · Windows 11 Version 25H2

957782cf-6585-4f8a-a694-39976c01af86

has vulnerable target scope2 retained · stored CVE-2026-21533 → microsoft · windows_11_23h2

2ed77ead-0af2-43cf-a973-1f743d7ae939554c6104-495b-467d-b897-af30d464c7e2

has vulnerable target scope1 retained · stored CVE-2026-21533 → microsoft · windows_server_2016

77c56cda-6ad8-4fe7-a3c0-3c0a171bd160

has vulnerable target scope1 retained · stored CVE-2026-21533 → microsoft · windows_server_2019

6cd9bcd2-8f0d-4852-9e29-833af065a771

has vulnerable target scope1 retained · stored CVE-2026-21533 → microsoft · windows_server_2025

cab15643-b1b6-45e6-b4d9-d16ce2e7d76a

has vulnerable target scope2 retained · stored CVE-2026-21533 → microsoft · windows_server_2012

4df98806-f195-47b0-b830-688e5206347ab5bc7116-16e1-46a7-898d-22116ec621e3

has vulnerable target scope2 retained · stored CVE-2026-21533 → microsoft · windows_10_1607

39a50a33-d60a-4b44-bcd6-fc9a6a209e9e39cbaa17-abb9-44fe-bf2d-7e76719b83f7

has vulnerable target scope2 retained · stored CVE-2026-21533 → microsoft · windows_11_24h2

08b00f13-d368-44ad-ac64-9b1ff8858b9c67147ea4-0090-4652-b8d5-5c3d8f5f6dca

has vulnerable target scope2 retained · stored CVE-2026-21533 → microsoft · windows_10_1809

84c87839-7016-4068-9311-ab486e2bb15adb8eb7c3-ccb7-4c57-99a2-50ff1cff7ac5

has vulnerable target scope3 retained · stored CVE-2026-21533 → microsoft · windows_10_22h2

293a2552-7628-4501-8778-412e3dba8527d4c08eee-9f9f-41f2-90bf-a547438d3e80e1169eeb-09f2-48fb-98b9-5a54a8aa09fc

has vulnerable target scope1 retained · stored CVE-2026-21533 → microsoft · windows_server_2022_23h2

ee97bf6e-1539-4e05-8466-515f3ecebd22

has vulnerable target scope1 retained · stored CVE-2026-21533 → microsoft · windows_server_2022

e6ba1b2d-749b-483b-982f-3f2b7a7b98de

has vulnerable target scope2 retained · stored CVE-2026-21533 → microsoft · windows_11_25h2

232a565f-4e4d-4011-9f07-9b8aa68414467773b4b2-5e94-4e5f-85f2-cf166f528cb7

has vulnerable target scope3 retained · stored CVE-2026-21533 → microsoft · windows_10_21h2

59838e26-25a1-4da1-ab8f-bc11acc4eb4c9e9e1926-2276-4c8a-8605-25f384a22072c310f0d8-1c34-4963-909c-af77a8db805a

Focused snapshot evidence neighborhood.

CVEProductSignalSelected / traceVisual proximity carries zero evidence weight.

Data as of

Evidence current through Oct 22, 2026, 6:07 PM UTC · 36 entities · 35 relationships · bounded complete