CVE-2026-26167

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-26167

CVE-2026-26167 affects Windows Push Notification Core. The vulnerability is a race condition from improper synchronization of a shared resource, enabling a locally authenticated attacker to elevate privileges. IT guidance from the April 2026 Patch Tuesday indicates this EoP issue is among the cri...