13 matches found
CVE-2026-58635-PoC
CVE-2026-58635: Windows 讲述人盲文本地权限提升 CVE-2026-58635 的概念验证,这是一个 Windows 讲述人盲文中的命令注入漏洞。本地经过身份验证的用户可以滥用可写的 BrlAPI 参数,使特权 BRLTTY 服务执行任意程序。 Microsoft 将该问题评级为重要 ,CVSS 3.1 得分为 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H),并将其映射到 CWE-77 。 此仓库仅用于在隔离实验室中进行授权测试。请勿在生产系统或您不拥有或管理的系统上运行。 概念验证演示内容 该 PoC...
CVE-2026-56174
Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally...
Windows Narrator Braille Elevation of Privilege Vulnerability
Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally...
PT-2026-70392
Name of the Vulnerable Software and Affected Versions Windows Narrator Braille affected versions not specified Description An untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about...
Exploit for CVE-2026-58635
CVE-2026-58635: Windows Narrator Braille Local Privilege Escal...
EUVD-2026-43776
Improper neutralization of special elements used in a command 'command injection' in Windows Narrator Braille allows an authorized attacker to elevate privileges locally...
CVE-2026-58635
Improper neutralization of special elements used in a command 'command injection' in Windows Narrator Braille allows an authorized attacker to elevate privileges locally...
Windows Narrator Braille Elevation of Privilege Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Windows Narrator Braille allows an authorized attacker to elevate privileges locally...
CVE-2026-48565
Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally...
CVE-2026-48565
Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally...
CVE-2026-48565
Windows Narrator Braille contains an untrusted search path vulnerability that can elevate privileges locally for an authorized user. Root cause is an untrusted search path in the Narrator Braille component, with an attacker able to exploit it without user interaction. CVSSv3.1 metrics indicate AV...