CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-02-10
Windows Remote Access Connection Manager (RasMan) Null Pointer Dereference Local DoS Vulnerability (CVE-2026-21525) Technical Advisory
[Affected Scope] Windows and Windows Server operating systems utilizing the Windows Remote Access Connection Manager (RasMan) service.
[Impact] An unauthorized local attacker can trigger a Null Pointer Dereference in the RasMan service, causing a local Denial of Service (DoS) by crashing the service or the entire system.
[Mitigation] Apply the latest Microsoft cumulative security updates immediately, or disable the RasMan service if remote access features are not required.