🟠 High | Source: Microsoft Security Response Center
CVE-2026-56174 is a privilege escalation vulnerability in Windows Narrator’s Braille support, caused by an untrusted search path flaw. An attacker who already has local access to a Windows system can exploit this to gain elevated privileges. Whilst the attack requires existing access, it represents a meaningful stepping stone in a broader attack chain.
Security Architect’s Take: Ensure Windows endpoint patching pipelines cover Azure Virtual Machines and AVD (Azure Virtual Desktop) session hosts, particularly those running accessibility features. Prioritise patching any Windows environments accessible to multiple users or lower-privileged accounts, and review local access controls to limit the blast radius of privilege escalation attempts.
Original advisory: CVE-2026-56174 Windows Narrator Braille Elevation of Privilege Vulnerability