CVE-2026-21251HighCVSS 7.8

Cluster Client Failover (CCF) Elevation of Privilege Vulnerability

Published
February 10, 2026
Last Modified
—

🔗 CVE IDs covered (1)

📋 Description

Use after free in Windows Cluster Client Failover allows an authorized attacker to elevate privileges locally.

🎯 Affected products9

  • Windows Server 2016
  • Windows Server 2016 (Server Core installation)
  • Windows Server 2019
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2022
  • Windows Server 2022 (Server Core installation)
  • Windows Server 2022, 23H2 Edition (Server Core installation)
  • Windows Server 2025
  • Windows Server 2025 (Server Core installation)

✅ Remediation

KB5075904 (Security Update) — fixed build 10.0.17763.8389 KB5075906 (Security Update) — fixed build 10.0.20348.4773 KB5075943 (Security Hotpatch Update) — fixed build 10.0.20348.4711 KB5075899 (Security Update) — fixed build 10.0.26100.32370 KB5075942 (Security Hotpatch Update) — fixed build 10.0.26100.32313 KB5075897 (Security Update) — fixed build 10.0.25398.2149 KB5075999 (Security Update) — fixed build 10.0.14393.8868

🔗 References (15)