CVE-2026-50363 Windows Push Notifications Elevation of Privilege Vulnerability

...

CVE-2026-50363

CVE-2026-50363 is a Windows Push Notifications elevation-of-privilege vulnerability characterized by a heap-based buffer overflow. An authorized, local attacker could escalate privileges. Microsoft has released updates addressing this (e.g., KB5095051 and MSRC/MSVC advisories) and recommends appl...

CVE-2026-44800 Windows Push Notifications Elevation of Privilege Vulnerability

...

CVE-2026-44800 Windows Push Notifications Elevation of Privilege Vulnerability

...

CVE-2026-44800

CVE-2026-44800 concerns a race condition in Windows Push Notifications caused by improper synchronization of a shared resource. This vulnerability enables an authorized, local attacker to achieve privilege elevation. Documented impact is Local, with Confidentiality, Integrity, and Availability al...

Windows Push Notifications Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

Windows Push Notifications Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

PT-2026-58346

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A heap-based buffer overflow exists in Windows Push Notifications. This flaw allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occur...

PT-2026-58328

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Windows Push Notifications contain a flaw that allows an authorized attacker to locally disclose sensitive information. This issue results in the exposure of push-notification data to...

PT-2026-58413

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description An issue in Windows Push Notifications allows an authorized attacker to locally disclose sensitive information to an unauthorized actor. Recommendations At the moment, ther...

PT-2026-58409

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description An issue in Windows Push Notifications allows an authorized attacker to locally disclose sensitive information to an unauthorized actor, which can affect the system...

PT-2026-58126

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A race condition exists in Windows Push Notifications, where concurrent execution using a shared resource with improper synchronization allows an authorized attacker to...

CVE-2026-50430: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally...

CVE-2026-50339: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally...

CVE-2026-50434: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally...

CVE-2026-50363: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-44800: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

KLA91153 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...

CVE-2026-53365

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-skb sends When a large message is fragmented into multiple skbs, the zerocopy uarg is only allocated and attached to the last skb in the loop. Non-final skbs carry pinned user pages...

OctoPrint has XSS in its Suppressed Command Notifications

ImpactOctoPrint versions up to and including 1.11.7 as well as 2.0.0rc1 and 2.0.0rc2 are affected by a vulnerability that allows injection of arbitrary HTML and JavaScript into Suppressed Command notifications popups generated by the printer.An attacker who successfully convinces a victim to prin...