CVE-2026-58635PoC(microsoft / windows_10_1809)

MEDIUMCVSS 7.8 · HIGH

Exploit discussion active in current signal (2 latest mentions)

Immediate actions

  • Patch microsoft windows_10_1809 systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

Improper neutralization of special elements used in a command ('command injection') in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.

4.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-77

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • windows_10_1809
  • windows_10_21h2
  • windows_10_22h2
  • windows_11_24h2

Threat summary

  • Public PoC and exploit tooling are both present
  • Patch or workaround signal is available
  • 7 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 2 signals
  • PoC mentioned or linked in 4 signals
  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 6 signals
  • Disclosure: 2 classified signals
  • Peaked 3d ago at 2 mentions (2026-07-15); latest day: 2
  • 7 total mentions across 4 days

Affected systems

Vendors
Products
windows_10_1809windows_10_21h2windows_10_22h2windows_11_24h2windows_11_25h2windows_11_26h1windows_server_2019windows_server_2022windows_server_2025

Deep dive

Activity timeline7 mentions / 4d
01122Mentions · 2026-07-15: 2Mentions · 2026-07-16: 1Mentions · 2026-07-17: 2Mentions · 2026-09-12: 2PoC Mentioned / Linked · 2026-07-15: 1PoC Mentioned / Linked · 2026-07-16: 1PoC Mentioned / Linked · 2026-09-12: 2Exploit Tool / Code · 2026-07-15: 1Exploit Tool / Code · 2026-07-16: 1Patch / Workaround · 2026-07-15: 1Patch / Workaround · 2026-07-17: 1Technical Details · 2026-07-15: 2Technical Details · 2026-07-16: 1Technical Details · 2026-07-17: 2Technical Details · 2026-09-12: 107-1507-1607-1709-12
Signal classification3 categories
PoC
457.1%
Disclosure
228.6%
Patch
114.3%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-07-152
Patch1PoC1
2026-07-161
PoC1
2026-07-172
Disclosure2
2026-09-122
PoC2
Full discourse7 posts
  • Dark Web Informer@DarkWebInformer
    PoC

    ‼️ CVE-2026-58635: Windows Narrator Braille Local Privilege Escalation PoC: https://github.com/DavidCarliez/CVE-2026-58635-PoC https://t.co/qLDzYg6vA4

    Post summary

    This notification shares a PoC for CVE‑2026‑58635, detailing a local privilege escalation in Windows Narrator Braille, but does not mention active exploitation, patches, or debunking.

    0210774213.0K
    234.5K followersView on X
  • dbugs@ptdbugs
    PoC

    A PoC/exploit has been discovered for vulnerability CVE-2026-58635 PT ID: PT-2026-58281 Vendor: Microsoft Product: Windows 10 Version 1809 Description: Improper neutralization of special elements used in a command ('command injection') in Windows Narrator Braille allows an authorized attacker to elevate privileges locally. References: • https://dbugs.ptsecurity.com/vulnerability/PT-2026-58281 • https://github.com/DavidCarliez/CVE-2026-58635-PoC #dbugs_vuln

    Post summary

    A PoC/exploit for CVE-2026-58635 was discovered and shared (GitHub link provided), detailing a command injection issue that allows local privilege escalation, but there is no evidence of active exploitation or available patches.

    110037152.1K
    3.4K followersView on X
  • Clandestine@akaclandestine
    Disclosure

    https://core-jmp.org/2026/07/cve-2026-58635-windows-narrator-braille-privilege-escalation/

    Post summary

    The article announces CVE‑2026‑58635, a privilege‑escalation flaw in Windows Narrator’s Braille mode, explains how the vulnerability works, and notes that Microsoft has issued a patch.

    030322.2K
    64.1K followersView on X
  • Lyrie.ai@lyrie_ai
    PoC

    Source: X search for PoC exploit 2026 Posted: 2026-07-15T15:11:28.000Z Likes: 32 0day Intel: A PoC/exploit has been discovered for vulnerability CVE-2026-58635

    Post summary

    A proof‑of‑concept/exploit for CVE-2026-58635 has been discovered, but no functional code or detailed vulnerability information is provided, and no evidence of active exploitation is reported.

    1000084
    325 followersView on X
  • Lyrie.ai@lyrie_ai
    PoC

    CVE-2026-58635: A PoC/exploit has been discovered for vulnerability CVE-2026-58635 PT ID: PT-2026-58281 Vendor: Microsoft Product: Windows 10 Version 1809 Description: Improper neutralization of special elements used in a command ('command injection') in Windows Narrator…

    Post summary

    A proof of concept/exploit for CVE‑2026‑58635, a command injection in Windows Narrator, has been discovered, but no active exploitation, patch details, or code are provided.

    10000104
    325 followersView on X
  • YACTINA@yactina1336
    Disclosure

    CVE-2026-58635: How the Windows Narrator Braille Bug Escalates a Standard User to SYSTEM https://core-jmp.org/2026/07/cve-2026-58635-windows-narrator-braille-privilege-escalation/

    Post summary

    The article announces a privilege‑escalation flaw in Windows Narrator's braille feature, allowing standard users to gain SYSTEM privileges.

    0000139
    20 followersView on X
  • Windows Forum@windowsforum
    Patch

    🪟 Windows Narrator’s braille support had a privilege-escalation hole—because even accessibility features need security audits. July’s cumulative update is the fix; patch before local attackers level up. https://windowsforum.com/threads/cve-2026-58635-july-2026-updates-fix-windows-narrator-eop.438302/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #WindowsSecurity #PrivilegeEscalation #PatchTuesday https://t.co/iVpc08eUvP

    Post summary

    The post reports that CVE‑2026‑58635, a privilege‑escalation flaw in Windows Narrator’s braille support, is fixed in July's cumulative update and urges users to apply the patch.

    0000049
    1.2K followersView on X
CPE platform detail17 entries

17 of 17 entries

PartVendorProductVersionTarget SWTarget HW
OSmicrosoftwindows_10_1809--x64
OSmicrosoftwindows_10_1809--x86
OSmicrosoftwindows_10_21h2--arm64
OSmicrosoftwindows_10_21h2--x64
OSmicrosoftwindows_10_21h2--x86
OSmicrosoftwindows_10_22h2--arm64
OSmicrosoftwindows_10_22h2--x64
OSmicrosoftwindows_10_22h2--x86
OSmicrosoftwindows_11_24h2--arm64
OSmicrosoftwindows_11_24h2--x64
OSmicrosoftwindows_11_25h2--arm64
OSmicrosoftwindows_11_25h2--x64
OSmicrosoftwindows_11_26h1--arm64
OSmicrosoftwindows_11_26h1--x64
OSmicrosoftwindows_server_2019---
OSmicrosoftwindows_server_2022---
OSmicrosoftwindows_server_2025---

Explore more