CVE-2026-50363 Windows Push Notifications Elevation of Privilege Vulnerability

...

CVE-2026-44800 Windows Push Notifications Elevation of Privilege Vulnerability

...

CVE-2026-44800

CVE-2026-44800 concerns a race condition in Windows Push Notifications caused by improper synchronization of a shared resource. This vulnerability enables an authorized, local attacker to achieve privilege elevation. Documented impact is Local, with Confidentiality, Integrity, and Availability al...

CVE-2026-44800 Windows Push Notifications Elevation of Privilege Vulnerability

...

Windows Push Notification Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally...

Windows Push Notification Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Notification allows an authorized attacker to disclose information locally...

Windows Push Notifications Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

Windows Push Notifications Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

Windows Push Notification Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally...

Windows Push Notification Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally...

MAL-2026-10537 Malicious code in neon-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e264a75c066f784e7900ad4f7f51598022eb9c7858fff489dc1861506ca855 neon-postgres is a clone of the porsager/postgres client with package metadata repository, author, homepage still pointing at the upstream project...

EUVD-2026-43560

PasswordPusher before 2.9.2 contains a brute-force vulnerability in the POST /p/:token/access endpoint that lacks route-specific rate limiting and per-push lockout mechanisms. Attackers who know a push token can systematically guess passphrases at 120 attempts per minute without triggering any...

PT-2026-58328

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Windows Push Notifications contain a flaw that allows an authorized attacker to locally disclose sensitive information. This issue results in the exposure of push-notification data to...

PT-2026-58413

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description An issue in Windows Push Notifications allows an authorized attacker to locally disclose sensitive information to an unauthorized actor. Recommendations At the moment, ther...

PT-2026-58346

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A heap-based buffer overflow exists in Windows Push Notifications. This flaw allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occur...

CVE-2026-50339: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally...

CVE-2026-44800: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

PT-2026-60111

Name of the Vulnerable Software and Affected Versions Woodpecker CI versions v1.0.0 through v3.15.0 Description A privilege escalation issue exists in instances using the Kubernetes backend. The pipeline option backend options.kubernetes.serviceAccountName is passed directly to the pod spec witho...

PT-2026-58126

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A race condition exists in Windows Push Notifications, where concurrent execution using a shared resource with improper synchronization allows an authorized attacker to...

KLA91153 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...