PT-2026-24285 · Microsoft · Windows+24

James Forshaw · Published 2026-03-10 · Updated 2026-03-10 · CVE-2026-24291

BDU

CVSS v2.0

6.8

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Уязвимость брокера регистрации вспомогательных технологий Windows Accessibility Infrastructure (ATBroker.exe) операционных систем Windows связана с неправильным присвоением разрешений для критичного ресурса. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

BDU:2026-03020

CVE-2026-24291

Affected Products

Windows

Windows 10 1607

Windows 10 1809

Windows 10 21H2

Windows 10 22H2

Windows 10 Version 1607

Windows 10 Version 1809

Windows 10 Version 21H2

Windows 10 Version 22H2

Windows 11 23H2

Windows 11 24H2

Windows 11 25H2

Windows 11 26H1

Windows 11 Version 23H2

Windows 11 Version 24H2

Windows 11 Version 25H2

Windows 11 Version 26H1

Windows 11 Version 22H3

Windows Server 2012

Windows Server 2012 R2

Windows Server 2016

Windows Server 2019

Windows Server 2022

Windows Server 2025

Windows Server 2022 23H2

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-24291 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24291 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-24291 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24291 · Security Note
• https://bdu.fstec.ru/vul/2026-03020 · Security Note
• https://reddit.com/r/Automox/comments/1rq9hhy/march_2026_patch_tuesday_quick_highlights_for · Reddit Post