Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory.
cve-program · CVE-2026-21519
Published
Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
Read the publisher's advisoryAffected versions, risk and source history
cve-program · CVE-2026-21519
PublishedWindows 10 Version 1607
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows 10 Version 1607",
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"versions": [
{
"version": "10.0.14393.0",
"lessThan": "10.0.14393.8868",
"versionType": "custom",
"status": "affected"
}
]
}Windows 10 Version 1809
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows 10 Version 1809",
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"versions": [
{
"version": "10.0.17763.0",
"lessThan": "10.0.17763.8389",
"versionType": "custom",
"status": "affected"
}
]
}Windows 10 Version 21H2
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows 10 Version 21H2",
"platforms": [
"32-bit Systems",
"ARM64-based Systems",
"x64-based Systems"
],
"versions": [
{
"version": "10.0.19044.0",
"lessThan": "10.0.19044.6937",
"versionType": "custom",
"status": "affected"
}
]
}Windows 10 Version 22H2
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows 10 Version 22H2",
"platforms": [
"32-bit Systems",
"ARM64-based Systems",
"x64-based Systems"
],
"versions": [
{
"version": "10.0.19045.0",
"lessThan": "10.0.19045.6937",
"versionType": "custom",
"status": "affected"
}
]
}Windows 11 version 22H3
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows 11 version 22H3",
"platforms": [
"ARM64-based Systems"
],
"versions": [
{
"version": "10.0.22631.0",
"lessThan": "10.0.22631.6649",
"versionType": "custom",
"status": "affected"
}
]
}Windows 11 Version 23H2
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows 11 Version 23H2",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.22631.0",
"lessThan": "10.0.22631.6649",
"versionType": "custom",
"status": "affected"
}
]
}Windows 11 Version 24H2
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows 11 Version 24H2",
"platforms": [
"ARM64-based Systems",
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26100.0",
"lessThan": "10.0.26100.7840",
"versionType": "custom",
"status": "affected"
}
]
}Windows 11 Version 25H2
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows 11 Version 25H2",
"versions": [
{
"version": "10.0.26200.0",
"lessThan": "10.0.26200.7840",
"versionType": "custom",
"status": "affected"
}
]
}Windows 11 version 26H1
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows 11 version 26H1",
"platforms": [
"ARM64-based Systems"
],
"versions": [
{
"version": "10.0.28000.0",
"lessThan": "10.0.28000.1575",
"versionType": "custom",
"status": "affected"
}
]
}Windows 11 Version 26H1
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows 11 Version 26H1",
"versions": [
{
"version": "10.0.28000.0",
"lessThan": "10.0.28000.1575",
"versionType": "custom",
"status": "affected"
}
]
}Windows Server 2016
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows Server 2016",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.14393.0",
"lessThan": "10.0.14393.8868",
"versionType": "custom",
"status": "affected"
}
]
}Windows Server 2016 (Server Core installation)
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows Server 2016 (Server Core installation)",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.14393.0",
"lessThan": "10.0.14393.8868",
"versionType": "custom",
"status": "affected"
}
]
}Windows Server 2019
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows Server 2019",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.17763.0",
"lessThan": "10.0.17763.8389",
"versionType": "custom",
"status": "affected"
}
]
}Windows Server 2019 (Server Core installation)
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows Server 2019 (Server Core installation)",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.17763.0",
"lessThan": "10.0.17763.8389",
"versionType": "custom",
"status": "affected"
}
]
}Windows Server 2022
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows Server 2022",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.20348.0",
"lessThan": "10.0.20348.4773",
"versionType": "custom",
"status": "affected"
}
]
}Windows Server 2022, 23H2 Edition (Server Core installation)
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows Server 2022, 23H2 Edition (Server Core installation)",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.25398.0",
"lessThan": "10.0.25398.2149",
"versionType": "custom",
"status": "affected"
}
]
}Windows Server 2025
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows Server 2025",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26100.0",
"lessThan": "10.0.26100.32370",
"versionType": "custom",
"status": "affected"
}
]
}Windows Server 2025 (Server Core installation)
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows Server 2025 (Server Core installation)",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26100.0",
"lessThan": "10.0.26100.32370",
"versionType": "custom",
"status": "affected"
}
]
}Original source record · Cite this exact observation · Complete original publisher JSON