Windows Narrator CVE-2026-58635

Exploitation requires local, authenticated access to the machine with an existing low-privilege account (CVSS PR:L, AV:L) and the ability to invoke the Windows Narrator Braille feature that carries the command-injection flaw; no user interaction by a victim is needed (UI:N). Limiting factors: the attacker must already be able to run code or interact with the session locally (no remote/network path exists), so this cannot be triggered over the network and functions only as a post-access escalation. The Narrator Braille code path must be reachable in the attacker's context, which is the case on default installations of the affected Windows client and server builds since Narrator ships in-box.

The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base 7.8 HIGH) describes a reliable, low-complexity local escalation requiring only existing low-level privileges and no user interaction, with full confidentiality, integrity, and availability impact on the host. Working against real-world priority: this is local-only (AV:L), so it is a post-compromise/second-stage capability rather than an internet-facing threat, and no EPSS score, POC, or KEV listing was provided - there is no public exploit identified at time of analysis and no evidence of active exploitation. No SSVC decision data was supplied. Net assessment: a genuinely useful EoP primitive for an attacker who already has a foothold, worth prompt patching on multi-user and server systems, but not an emergency remote-exploitation event.

An attacker who already holds a low-privileged local account - for example a standard user on a shared workstation or an RDP session on a terminal server - invokes Narrator's Braille functionality and supplies crafted input containing shell metacharacters that are not neutralized. The injected command executes with elevated privileges, giving the attacker SYSTEM-level control to install tools, read protected data, or disable defenses. No public exploit is identified at time of analysis, but the low attack complexity makes reliable weaponization plausible once details are known.