cve 2026 21533

CVE-2026-21533 is an Elevation of Privilege (EoP) vulnerability in Windows Remote Desktop Services (RDS) documented in Microsoft's Security Update Guide. It was addressed during February's Patch Tuesday, prompting security vendors to release detection and IPS signatures the same day. Administrators running RDS hosts, VDI pools, jump boxes, or multi-user Windows endpoints should prioritize applying the update. The vulnerability affects environments where Remote Desktop Services are enabled, making it a high-priority item for enterprise IT teams managing remote access infrastructure.