Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.
What privileges could be gained by an attacker who successfully exploited this vulnerability? An attacker who successfully exploited this vulnerability could gain SYSTEM privileges. How do I protect myself from this vulnerablity? Microsoft recommends installing the latest BRLTTY feature update to help protect systems from this vulnerability. Customers can download and install BRLTTY through Windows Accessibility settings by navigating to: Settings → Accessibility → Narrator → Use Braille display → Download BRLTTY Once installed, ensure the latest available update is applied to receive the security fix and associated protections.
Zeeshan Shaikh (@bugzzzhunter) working with <a href="https://www.zerodayinitiative.com/">TrendAI Zero Day Initiative</a>