CVE-2026-21221 | Microsoft Windows 11 24H2/11 25H2/Server 2025 Capability Access Management Service race condition

A vulnerability has been found in Microsoft Windows 11 24H2/11 25H2/Server 2025 and classified as critical. Affected by this issue is some unknown functionality of the component Capability Access Management Service. The manipulation leads to race condition.

This vulnerability is uniquely identified as CVE-2026-21221. Local access is required to approach this attack. No exploit exists.

It is recommended to apply a patch to fix this issue.