What is the CVSS score of CVE-2026-24291?

CVE-2026-24291 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Windows are affected by CVE-2026-24291?

A privilege escalation vulnerability in Windows Accessibility Infrastructure (ATBroker.exe) allows authorized users to gain elevated system access, potentially compromising sensitive data and…. A patch is available.

Is there a public PoC exploit available for CVE-2026-24291?

Yes, a public proof-of-concept exploit is available for CVE-2026-24291. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-24291?

Within 24 hours: Inventory all Windows systems with accessibility features enabled and assess user access patterns to identify high-risk environments. Within 7 days: Implement network segmentation to restrict local administrative access and deploy endpoint detection rules to monitor ATBroker.exe process activity for suspicious behavior. Within 30 days: Conduct security awareness training on principle of least privilege, restrict accessibility feature usage to essential personnel only, and evaluate Windows security hardening baselines including User Access Control (UAC) reinforcement.

Windows CVE-2026-24291

HIGH

Incorrect Permission Assignment for Critical Resource (CWE-732)

2026-03-10 secure@microsoft.com

Windows Information Disclosure Microsoft Windows 10 1607 Windows 10 1809 Windows 10 21h2 Windows 10 22h2 Windows 11 23h2 Windows 11 24h2 Windows 11 25h2 Windows 11 26h1 Windows Server 2012 Windows Server 2016 Windows Server 2019 Windows Server 2022 Windows Server 2022 23h2 Windows Server 2025

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Mar 10, 2026 - 18:18 nvd

HIGH 7.8

DescriptionCVE.org

Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally.

AnalysisAI

Privilege escalation in Windows Accessibility Infrastructure (ATBroker.exe) across Windows 10, Windows 11, and Windows Server 2022 stems from improper permission assignments on a critical resource. A local authenticated attacker can exploit this misconfiguration to gain elevated privileges without user interaction. No patch is currently available for this vulnerability.

Technical ContextAI

This vulnerability (CWE-732: Incorrect Permission Assignment for Critical Resource) Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally.