cve 2026 58635

The cve 2026 58635 tag covers Microsoft’s fix for a command-injection vulnerability in Windows Narrator braille support. The flaw could allow a locally authenticated attacker to elevate privileges on supported Windows 10, Windows 11, Windows Server 2019, Windows Server 2022, and Windows Server 2025 systems. Microsoft addressed the issue in the July 14, 2026 security updates, making the applicable monthly cumulative update the practical remedy. The vulnerability is rated Important with a CVSS 3.1 score of 7.8. Microsoft reported that CVE-2026-58635 had not been publicly disclosed or exploited and assessed exploitation as less likely.