Back Gbhackers

Researchers Disclose ‘RegPwn,’ a Windows Registry Weakness Allowing SYSTEM Access

Gbhackers •Divya • March 18, 2026

Researchers at MDSec have disclosed a newly patched Elevation of Privilege vulnerability in Microsoft Windows, known as “RegPwn”. Tracked as CVE-2026-24291, this flaw allows a low-privileged user to gain full SYSTEM access by exploiting how Windows handles registry configurations for its built-in Accessibility features. Windows Accessibility features, such as the On-Screen Keyboard and Narrator, run […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

RegPwn: Critical Windows Registry Flaw Grants SYSTEM Access Researchers at MDSec have disclosed a critical Elevation of Privilege vulnerability in Microsoft Windows, identified as 'RegPwn' and tracked as CVE-2026-24291. This vulnerability allows low-privileged users to gain full SYSTEM access by exploiting the handling of registry configurations for Windows Accessibility features. The flaw was discovered during internal engagements by MDSec's red team, who have been aware of it since January 2025. Microsoft addressed the issue in a recent Patch Tuesday update on March 10, 2026. The flaw affects various Windows systems utilizing Accessibility features like the On-Screen Keyboard and Narrator. Security professionals are urged to apply the patch immediately to mitigate potential exploitation. The vulnerability has been classified as high severity due to its potential impact on system security. 2 sources 71

Extracted Entities

Researchers Disclose ‘RegPwn,’ a Windows Registry Weakness Allowing SYSTEM Access

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

Platforms (1)

Vulnerabilities (1)