Windows RAS Connection Manager: denial of service (CVE-2026-21525)

medium severity · exploited in the wild · published 2026-02-10

An attacker can make part of Windows crash or stop responding. Attackers already use this flaw in the wild.

Fixed in: 10.0.28000.1575

CVE: CVE-2026-21525

Source: Microsoft (MSRC)

Get the fix

Fixlane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the Fixlane MCP server and call get_fix_prompt with incident id 1579 and your operating system.