CVE-2026-24291

High

Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker…

secure@microsoft.com·CWE-732·Published 2026-03-10

CVSS

7.8

EPSS

0.03

KEV

Exploits

cve.orgen

169 chars

Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally.

NVDen

169 chars

Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally.

NVDes

186 chars

Asignación incorrecta de permisos para un recurso crítico en la Infraestructura de Accesibilidad de Windows (ATBroker.exe) permite a un atacante autorizado elevar privilegios localmente.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	7.8	—	—	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
3.1	Secondary	NVD	7.8	1.8	5.9