Skip to content
CodeAuditAgent

CVE-2026-58635

Improper neutralization of special elements used in a command ('command injection') in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.

Weakness

Improper neutralization of special elements used in a command ('command injection') in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.

Affected products

  • microsoft windows_10_1809
  • microsoft windows_10_21h2
  • microsoft windows_10_22h2
  • microsoft windows_11_24h2
  • microsoft windows_11_25h2
  • microsoft windows_11_26h1
  • microsoft windows_server_2019
  • microsoft windows_server_2022

References

Find the bug before an attacker does.

Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.