جزئیات آسیب‌پذیری

CVE-2026-21251

Microsoft Windows Server

Cluster Client Failover (CCF) Elevation of Privilege Vulnerability

CVSS 3.1

7.8بالا

Use after free in Windows Cluster Client Failover allows an authorized attacker to elevate privileges locally.

امتیاز	نسخه	منبع	بردار
7.8بالا	3.1	CVEProject cvelistV5 (CNA) (microsoft)	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C`

فروشنده	محصول	نسخه‌ها	منبع
Microsoft	Windows Server 2016	10.0.14393.0 ≤ v < 10.0.14393.8868	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2016 (Server Core installation)	10.0.14393.0 ≤ v < 10.0.14393.8868	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2019	10.0.17763.0 ≤ v < 10.0.17763.8389	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2019 (Server Core installation)	10.0.17763.0 ≤ v < 10.0.17763.8389	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2022	10.0.20348.0 ≤ v < 10.0.20348.4773	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	10.0.25398.0 ≤ v < 10.0.25398.2149	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2025	10.0.26100.0 ≤ v < 10.0.26100.32370	CVEProject cvelistV5 (CNA)
Microsoft	Windows Server 2025 (Server Core installation)	10.0.26100.0 ≤ v < 10.0.26100.32370	CVEProject cvelistV5 (CNA)

۰٫۴۳٪

احتمال بهره‌برداری در ۳۰ روز

۳۸٫۳٪

صدک (نسبت به همه‌ی CVEها)