CVE Watch17 jul 2026

CVE-2026-58635

Improper neutralization of special elements used in a command ('command injection') in Windows Narrator Braille allows an authorized attacke

CVSS

7.8

Alto

EPSS

0.2%

p12

KEV

—

Exploit Today

0-100

Publicado: 14 jul 2026 · Última mod.: 17 jul 2026 · CWE-77

EPSS · 30d

0.2%EPSS · 30 días0.5%

2026-07-152026-07-17

Descripción técnica

Improper neutralization of special elements used in a command ('command injection') in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.

Referencias oficiales

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58635

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-422718.8 ALT

99.6%

KEV—80BerriAI LiteLLM Command Injection Vulnerability4d CVE-2023-349609.8 CRÍ

99.9%

——30A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name.10d CVE-2023-376799.8 CRÍ

99.9%

——30A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server.10d CVE-2026-80379.6 CRÍ

98.6%

——30OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints5d CVE-2022-457018.8 ALT

98.5%

——30Arris TG2482A firmware through 9.1.103GEM9 allow Remote Code Execution (RCE) via the ping utility feature.10d CVE-2023-337828.8 ALT

98.3%

——30D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability via the iperf3 diagnostics function.10d