Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
Windows ATBroker.exe Privilege Elevation Vulnerability
CVE-2026-24291
Summary
A security issue in Windows Accessibility Infrastructure (ATBroker.exe) could allow an authorized user to gain higher-level access to a Windows system. This means a person with normal user permissions might be able to access sensitive areas of the system they shouldn't be able to. To protect your system, apply the latest Windows updates as soon as possible.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions | Fix available |
|---|---|---|---|
| microsoft | windows_10_1607 | <= 10.0.14393.8957 | – |
| microsoft | windows_10_1607 | <= 10.0.14393.8957 | – |
| microsoft | windows_10_1809 | <= 10.0.17763.8511 | – |
| microsoft | windows_10_1809 | <= 10.0.17763.8511 | – |
| microsoft | windows_10_21h2 | <= 10.0.19044.7058 | – |
| microsoft | windows_10_21h2 | <= 10.0.19044.7058 | – |
| microsoft | windows_10_21h2 | <= 10.0.19044.7058 | – |
| microsoft | windows_10_22h2 | <= 10.0.19045.7058 | – |
| microsoft | windows_10_22h2 | <= 10.0.19045.7058 | – |
| microsoft | windows_10_22h2 | <= 10.0.19045.7058 | – |
| microsoft | windows_11_23h2 | <= 10.0.22631.6783 | – |
| microsoft | windows_11_23h2 | <= 10.0.22631.6783 | – |
| microsoft | windows_11_24h2 | <= 10.0.26100.7979 | – |
| microsoft | windows_11_24h2 | <= 10.0.26100.7979 | – |
| microsoft | windows_11_25h2 | <= 10.0.26200.7979 | – |
| microsoft | windows_11_25h2 | <= 10.0.26200.7979 | – |
| microsoft | windows_11_26h1 | <= 10.0.28000.1719 | – |
| microsoft | windows_11_26h1 | <= 10.0.28000.1719 | – |
| microsoft | windows_server_2012 | All versions | – |
| microsoft | windows_server_2012 | r2 | – |
| microsoft | windows_server_2016 | <= 10.0.14393.8957 | – |
| microsoft | windows_server_2019 | <= 10.0.17763.8511 | – |
| microsoft | windows_server_2022 | <= 10.0.20348.4830 | – |
| microsoft | windows_server_2022_23h2 | <= 10.0.25398.2207 | – |
| microsoft | windows_server_2025 | <= 10.0.26100.32463 | – |
Original title
Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally.
Original description
Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally.
nvd CVSS3.1
7.8
Vulnerability type
CWE-732
Incorrect Permission Assignment for Critical Resource
Published: 10 Mar 2026 · Updated: 14 Mar 2026 · First seen: 11 Mar 2026