CVE-2026-21519: Microsoft Windows Type Confusion Vulnerability. Microsoft
Microsoft Windows Type Confusion Vulnerability. Microsoft Desktop Windows Manager contains a type confusion vulnerability that could allow an authorized attacker to elevate privileges locally.
- CISA KEV-listed (remediation due 2026-03-03)
- EPSS 4.5% (89.4% percentile)