CVE-2026-24291

CVE-2026-24291 affects Windows Accessibility Infrastructure (ATBroker.exe). It is an Elevation of Privilege vulnerability with local attack vector, require low privileges and no user interaction, and it impacts confidentiality, integrity, and availability. Exploit code maturity is UNPROVEN; remed...

CVE-2026-24291 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

...

CVE-2026-24291 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

...

CVE-2026-24291

Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure ATBroker.exe allows an authorized attacker to elevate privileges locally...

Windows Accessibility Infrastructure (ATBroker.exe) Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Accessibility Infrastructure ATBroker.exe allows an authorized attacker to disclose information locally...

Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure ATBroker.exe allows an authorized attacker to elevate privileges locally...

Linux kernel secure execution environment register_shm_helper Heap Buffer Overflow DoS

The vulnerability of the registershmhelper function in the drivers/tee/teeshm.c file, a driver for the secure execution environment of the Linux kernel, is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Secret Net Studio Shadow Copying Resource Management

The vulnerability of the shadow copying subsystem of the Secret Net Studio protection tool is related to resource management errors. Exploiting this vulnerability could allow an attacker to influence the accessibility and integrity of the protected information...

KB5078774: Windows Server 2012 R2 Security Update (March 2026)

The remote Windows host is missing security update 5078774. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Print Spooler Components allows an authorized attacker to execute code over a network. CVE-2026-23669 - Use after free in Windows Win32K allows an...

CVE-2026-25186: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows Accessibility Infrastructure ATBroker.exe allows an authorized attacker to disclose information locally...

KB5078938: Windows 10 Version 1607 / Windows Server 2016 Security Update (March 2026)

The remote Windows host is missing security update 5078938. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Print Spooler Components allows an authorized attacker to execute code over a network. CVE-2026-23669 - Use after free in Windows Win32K allows an...

PT-2026-24310

Name of the Vulnerable Software and Affected Versions Windows Accessibility Infrastructure ATBroker.exe affected versions not specified Description The issue concerns the insufficient protection of sensitive data within the Windows Accessibility Infrastructure ATBroker.exe. Successful exploitatio...

PT-2026-24285

Name of the Vulnerable Software and Affected Versions Windows versions prior to March 10, 2026 Patch Tuesday Description An improper permission assignment within the Windows Accessibility Infrastructure ATBroker.exe allows an authorized attacker to elevate privileges locally. The issue stems from...

CVE-2026-24291: Incorrect Permission Assignment for Critical Resource

Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure ATBroker.exe allows an authorized attacker to elevate privileges locally...

Broken Access: On the Challenges of Screen Reader Assisted Two-Factor and Passwordless Authentication

In today's technology-driven world, web services have opened up new opportunities for blind and visually impaired people to interact independently. Securing interactions with these services is crucial; however, currently deployed authentication mainly concentrate on sighted users, overlooking the...

Linux KVM MMU Buffer Overflow DoS

The vulnerability in the arch/x86/kvm/mmu.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

F2FS Heap Buffer Overflow DoS

The vulnerability of the f2fsnewnodepage function in the fs/f2fs/node.c file of the F2FS file system in the Linux operating system is related to code errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

aratinga (0.1.0a0.dev3), coop (7.1.0) +5 more potentially affected by CVE-2026-28223 via wagtail (>=7.1.0, <=7.1.3)

wagtail PYPI version =7.1.0, =1.1.1, =2.0.0, =0.0.1, =7.1.0a1, =7.1.0b0 Source cves: CVE-2026-28223 Source advisory: OSV:PYSEC-2026-2308...

puput (2.0.0), wagtail-all-in-one-accessibility (>=1.1.0, <=1.8.0) +4 more potentially affected by CVE-2026-28222 via wagtail (5.0.5)

wagtail PYPI version 5.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - puput 2.0.0 - wagtail-all-in-one-accessibility =1.1.0, =5.0.0, =3.10.1, =0.0.1, =0.0.2 Source cves: CVE-2026-28222 Source advisory:...

aratinga (0.1.0a0.dev3), coop (7.1.0) +5 more potentially affected by CVE-2026-28222 via wagtail (>=7.1.0, <=7.1.3)

wagtail PYPI version =7.1.0, =1.1.1, =2.0.0, =0.0.1, =7.1.0a1, =7.1.0b0 Source cves: CVE-2026-28222 Source advisory: OSV:PYSEC-2026-2307...