CVE Catalog

CVE-2026-61358

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

High risk
3.68%

89th percentile - higher than 89% of all known CVEs

Summary

A vulnerability in Windows Accessibility Infrastructure (ATBroker.exe) involves improper link resolution before file access. This allows an authorized attacker to elevate privileges locally.

Risk Assessment

An attacker with user privileges could gain higher privileges, potentially leading to full system compromise.

Recommendation

Install the latest Windows security updates. Restrict system access to trusted users only.

Original NVD description (English source)

Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS