The vulnerability in Windows Narrator Braille arises from an untrusted search path, permitting an attacker with authorized local access to gain elevated privileges. By manipulating the search order, the attacker can execute code with higher rights, potentially compromising the entire workstation. This flaw matches the CWE identifier for untrusted search path. No elevation of privileges beyond the local user context is described.

Microsoft Windows Narrator Braille is the affected component. The impact applies to all versions of Windows Narrator Braille until the security update is applied; no specific version roll‑ups were disclosed in the advisory.

The CVSS score of 7.8 indicates a high severity. EPSS data is unavailable, so the current exploitation probability is unclear, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector requires an attacker to already have legitimate access to the target system, after which they can trigger the untrusted search path to obtain higher privileges.