CVE-2026-58635

HighCVSS 7.8

Published: 14/07/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

12th percentile - higher than 12% of all known CVEs

Summary

In Windows Narrator Braille, improper neutralization of special elements used in a command (command injection) allows an authorized attacker to elevate privileges locally.

Risk Assessment

An authorized user can execute arbitrary commands on the system, potentially leading to full machine compromise.

Recommendation

It is recommended to apply the security patch from Microsoft or disable the Narrator Braille feature if not in use.

Other vulnerabilities in Windows Narrator Braille

See all

CVE-2026-56174High
Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.
CVE-2026-48565High
Windows Narrator Braille has an untrusted search path vulnerability that allows an authorized attacker to elevate privileges locally.

Original NVD description (English source)

Improper neutralization of special elements used in a command ('command injection') in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.