CVE-2026-42991

CVE-2026-42991 describes a race condition in Windows Push Notifications arising from improper synchronization of a shared resource. This yields local privilege escalation for an authorized attacker. The CVSS v3.1 metrics indicate local attack vector, high impact on confidentiality, integrity, and...

CVE-2026-42977 Windows Push Notifications Elevation of Privilege Vulnerability

...

CVE-2026-42978 Windows Push Notifications Elevation of Privilege Vulnerability

...

EUVD-2026-35739

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-42977 Windows Push Notifications Elevation of Privilege Vulnerability

...

CVE-2026-42977

CVE-2026-42977 describes a race condition in Windows Push Notifications caused by improper synchronization of a shared resource. This vulnerability enables an authorized, local attacker to elevate privileges. The CVSS 3.1 base score is 7.8 (HIGH) with Local attack vector, high complexity, and req...

EUVD-2026-35738

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-42978 Windows Push Notifications Elevation of Privilege Vulnerability

...

CVE-2026-42978

CVE-2026-42978: A race condition due to improper synchronization in Windows Push Notifications leads to local privilege escalation for an authorized attacker. The CVSSv3.1 base score is 7.8 (LOCAL, HIGH impact on confidentiality, integrity, and availability) with HIGH attack complexity and LOW pr...

EUVD-2026-35733

Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally...

CVE-2026-42973

Technical details (affected software, conditions, exploitability, and remediation) are not publicly available in the provided documents; monitor for updates.

EUVD-2026-35731

Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally...

EUVD-2026-35732

Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally...

CVE-2026-42970

CVE-2026-42970 involves Windows Push Notifications and is caused by the use of an uninitialized resource , enabling an authorized attacker to locally disclose information. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) yields a base score of 5.5 (Medium) with high confidentiality impac...

CVE-2026-42971

CVE-2026-42971 involves a use of an uninitialized resource in Windows Push Notifications, enabling a locally authenticated attacker to disclose information. Affected component: Windows Push Notifications. Root cause: use of an uninitialized resource. Impact: local information disclosure with Conf...

EUVD-2026-35730

Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally...

CVE-2026-42969

Technical details about CVE-2026-42969 are not publicly available in the provided documents. Monitor for updates.

Windows Push Notifications Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

Windows Push Notifications Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

Windows Push Notification Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally...