Описание
Windows Narrator Braille Elevation of Privilege Vulnerability
Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.
FAQ
What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.
How do I protect myself from this vulnerablity?
Microsoft recommends installing the latest BRLTTY feature update to help protect systems from this vulnerability. Customers can download and install BRLTTY through Windows Accessibility settings by navigating to:
Settings → Accessibility → Narrator → Use Braille display → Download BRLTTY
Once installed, ensure the latest available update is applied to receive the security fix and associated protections.
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
EPSS
7.8 High
CVSS3
Связанные уязвимости
Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.
Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.
Уязвимость модуля поддержки шрифта Брайля (Braille) приложения озвучки текста для незрячих и слабовидящих пользователей Narrator, позволяющая нарушителю повысить свои привилегии
EPSS
7.8 High
CVSS3