CVE-2026-25186Disclosure(microsoft / windows_10_1607)

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch microsoft windows_10_1607 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Exposure of sensitive information to an unauthorized actor in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to disclose information locally.

microsoft CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25186

Weakness type (CWE)

CWE-200

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2

Threat summary

Patch or workaround signal is available
4 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 4 signals
Disclosure: 3 classified signals
Peaked 1d ago at 3 mentions (2026-03-16); latest day: 1
4 total mentions across 2 days

Affected systems

Vendors

microsoft

Products

windows_10_1607windows_10_1809windows_10_21h2windows_10_22h2windows_11_23h2windows_11_24h2windows_11_25h2windows_11_26h1windows_server_2012windows_server_2016

2 versions affected across 14 products

Deep dive

Activity timeline4 mentions / 2d

Signal classification2 categories

Disclosure

375.0%

Patch

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-16	3	Disclosure3
2026-05-19	1	Patch1

Full discourse4 posts

0patch@0patch144d
Patch
Micropatches released for Windows Accessibility Infrastructure Elevation of Privilege Vulnerability (CVE-2026-24291, CVE-2026-25186, CVE-2026-25187) https://blog.0patch.com/2026/05/micropatches-released-for-windows.html https://t.co/1be3lEyUD2
Post summary
The post announces Microsoft’s release of micropatches for the Windows Accessibility Infrastructure elevation‑of‑privilege vulnerabilities CVE‑2026‑24291, CVE‑2026‑25186, and CVE‑2026‑25187, providing a fix.
140102985
8.4K followersView on X
Aakash Rahsi@rahsi_aaka208d
Disclosure
CVE-2026-25186 | Windows Accessibility Infrastructure (ATBroker.exe) Information Disclosure Vulnerability https://www.aakashrahsi.online/post/cve-2026-25186 https://t.co/XFsOhviTMU
Post summary
A tweet announces CVE-2026-25186—a Windows Accessibility Infrastructure information disclosure vulnerability—linking to a post that presumably details the issue, but provides limited specifics.
0000039
2 followersView on X
Infoflowcloud@infoflowcloud208d
Disclosure
🚨*CVE* CVE-2026-25186 Exposure of sensitive information to an unauthorized actor in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to disclose informatio… https://www.cve.org/CVERecord?id=CVE-2026-25186 ----- Traducción: CVE-2026-25186 Exp… http://infoflow.cloud`
Post summary
The tweet announces the newly disclosed CVE-2026-25186, describing its impact on Windows Accessibility Infrastructure, but does not provide PoC, exploit, or remediation details.
0000034
58 followersView on X
CVE@CVEnew208d
Disclosure
CVE-2026-25186 Exposure of sensitive information to an unauthorized actor in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to disclose informatio… https://www.cve.org/CVERecord?id=CVE-2026-25186
Post summary
The text reports CVE-2026-25186, outlining an information‑disclosure flaw in Windows Accessibility Infrastructure's ATBroker.exe that could let an authorized attacker reveal sensitive information; no PoC, exploit, patch, or active exploitation details are provided.
00000215
56.7K followersView on X

CPE platform detail25 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

25 of 25 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	microsoft	windows_10_1607	-	-	x64
OS	microsoft	windows_10_1607	-	-	x86
OS	microsoft	windows_10_1809	-	-	x64
OS	microsoft	windows_10_1809	-	-	x86
OS	microsoft	windows_10_21h2	-	-	arm64
OS	microsoft	windows_10_21h2	-	-	x64
OS	microsoft	windows_10_21h2	-	-	x86
OS	microsoft	windows_10_22h2	-	-	arm64
OS	microsoft	windows_10_22h2	-	-	x64
OS	microsoft	windows_10_22h2	-	-	x86
OS	microsoft	windows_11_23h2	-	-	arm64
OS	microsoft	windows_11_23h2	-	-	x64
OS	microsoft	windows_11_24h2	-	-	arm64
OS	microsoft	windows_11_24h2	-	-	x64
OS	microsoft	windows_11_25h2	-	-	arm64
OS	microsoft	windows_11_25h2	-	-	x64
OS	microsoft	windows_11_26h1	-	-	arm64
OS	microsoft	windows_11_26h1	-	-	x64
OS	microsoft	windows_server_2012	-	-	-
OS	microsoft	windows_server_2012	r2	-	-
OS	microsoft	windows_server_2016	-	-	-
OS	microsoft	windows_server_2019	-	-	-
OS	microsoft	windows_server_2022	-	-	-
OS	microsoft	windows_server_2022_23h2	-	-	-
OS	microsoft	windows_server_2025	-	-	x64

Explore more

Back to dashboard microsoft CVEs windows_10_1607 vulnerabilities

What researchers are saying

CVE-2026-25186

0patch@0patchPatch

The post announces Microsoft’s release of micropatches for the Windows Accessibility Infrastructure elevation‑of‑privilege vulnerabilities CVE‑2026‑24291, CVE‑2026‑25186, and CVE‑2026‑25187, providing a fix.

Aakash Rahsi@rahsi_aakaDisclosure

A tweet announces CVE-2026-25186—a Windows Accessibility Infrastructure information disclosure vulnerability—linking to a post that presumably details the issue, but provides limited specifics.

Infoflowcloud@infoflowcloudDisclosure

The tweet announces the newly disclosed CVE-2026-25186, describing its impact on Windows Accessibility Infrastructure, but does not provide PoC, exploit, or remediation details.

CVE@CVEnewDisclosure

The text reports CVE-2026-25186, outlining an information‑disclosure flaw in Windows Accessibility Infrastructure's ATBroker.exe that could let an authorized attacker reveal sensitive information; no PoC, exploit, patch, or active exploitation details are provided.