CVE-2026-24291 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

Api.Msrc.Microsoft • March 10, 2026

Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities in Windows Accessibility Infrastructure (ATBroker.exe) Two vulnerabilities have been identified in the Windows Accessibility Infrastructure (ATBroker.exe) on March 10, 2026. CVE-2026-25186 allows unauthorized information disclosure, while CVE-2026-24291 enables privilege escalation for authorized attackers. Both vulnerabilities pose significant risks to users of affected Windows systems. 2 sources 58

Extracted Entities

CVE-2026-24291 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

The full story

Extracted Entities

CVEs (1)

MITRE ATT&CK (1)

Platforms (1)