CVE-2026-24291 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

...

CVE-2026-24291

Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure ATBroker.exe allows an authorized attacker to elevate privileges locally...

CVE-2026-24291

CVE-2026-24291 affects Windows Accessibility Infrastructure (ATBroker.exe). It is an Elevation of Privilege vulnerability with local attack vector, require low privileges and no user interaction, and it impacts confidentiality, integrity, and availability. Exploit code maturity is UNPROVEN; remed...

CVE-2026-27139 vulnerabilities

Vulnerabilities for packages: knative-net-istio-fips, timescaledb-parallel-copy, fleet-server, crossplane-provider-aws-eks-fips, crossplane-provider-kubernetes-fips, pvc-autoresizer-fips, jaeger-fips, prometheus-elasticsearch-exporter-fips, ingress-nginx-controller-fips, nri-rabbitmq, mongo-tools...

CVE-2026-25572

creationtimestamp| type| source ---|---|--- 2026-03-10 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0255/ 2026-03-17 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-04...

The vulnerability of the `meson_vpu_has_available_connectors()` function in the `drivers/gpu/drm/meson/meson_drv.c` driver for the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mesonvpuhasavailableconnectors function in the drivers/gpu/drm/meson/mesondrv.c driver for the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability can allow a remote...

CVE-2026-24291: Incorrect Permission Assignment for Critical Resource

Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure ATBroker.exe allows an authorized attacker to elevate privileges locally...

CVE-2026-25186: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows Accessibility Infrastructure ATBroker.exe allows an authorized attacker to disclose information locally...

PT-2026-24341

Name of the Vulnerable Software and Affected Versions Coral Server versions prior to 1.1.0 Description Coral Server is an open collaboration infrastructure designed for communication, coordination, trust, and payments within The Internet of Agents. Before version 1.1.0, the software permitted the...

PT-2026-24310

Name of the Vulnerable Software and Affected Versions Windows Accessibility Infrastructure ATBroker.exe affected versions not specified Description The issue concerns the insufficient protection of sensitive data within the Windows Accessibility Infrastructure ATBroker.exe. Successful exploitatio...

The vulnerability of the anx7625_i2c_probe() function in the drivers/gpu/drm/bridge/analogix/anx7625.c driver for the Direct Rendering Infrastructure (DRI) component of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the anx7625i2cprobe function in the drivers/gpu/drm/bridge/analogix/anx7625.c driver for the Direct Rendering Infrastructure DRI component of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service...

KB5078774: Windows Server 2012 R2 Security Update (March 2026)

The remote Windows host is missing security update 5078774. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Print Spooler Components allows an authorized attacker to execute code over a network. CVE-2026-23669 - Use after free in Windows Win32K allows an...

Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical Infrastructure

High-value organizations located in South, Southeast, and East Asia have been targeted by a Chinese threat actor as part of a years-long campaign. The activity, which has targeted aviation, energy, government, law enforcement, pharmaceutical, technology, and telecommunications sectors, has been...

CVE-2026-26051

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then...

CVE-2026-29781 Sliver: Authenticated Nil-Pointer Dereference in Handlers

Sliver is a command and control framework that uses a custom Wireguard netstack. In versions from 1.7.3 and prior, a vulnerability exists in the Sliver C2 server's Protobuf unmarshalling logic due to a systemic lack of nil-pointer validation. By extracting valid implant credentials and omitting...

prima-incident-response-security-poc

DevOps Security Pipeline POC A security-integrated CI/CD pipe...

EUVD-2026-10035

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then...

CVE-2026-26288

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then...

EUVD-2026-10034

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then...

CVE-2026-26288

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then...