CVE-2026-21519

Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero
Triaged: Feb. 18, 2026 6 articles

EPSS Score

Source: FIRST.org · 2026-05-24
4.07%
probability
This CVE has a 4.07% probability of being exploited in the next 30 days.
0% Top 88.7th percentile of all CVEs 100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Description

Project Zero
Desktop Window Manager Elevation of Privilege Vulnerability

Attack Intelligence

Google Project Zero

Patched
Feb. 10, 2026
Reported by
Microsoft Threat Intelligence Center (MSTIC) & Microsoft Security Response Center (MSRC)

Signal Intelligence

Confidence
92%
EPSS 4.07%
Mentions 6
Last Seen Feb 11, 2026

CNA Information

Analyst Note

CVE-2026-21519 is confirmed as a zero-day with active exploitation, featured in Microsoft's February 2026 Patch Tuesday covering six exploited vulnerabilities. The vulnerability affects Windows 10 with a HIGH CVSS score (7.8) and has significant media coverage from credible sources including TheHackerNews, BleepingComputer, and CISA, corroborating active real-world exploitation.

Threat Actors 2

Ice Fog
apt_group Information theft and espionage 🇨🇳 CN
Nomad Panda
apt_group Information theft and espionage 🇨🇳 CN

Triage Info

Decided atFeb 18, 2026