CVE-2026-42973

MediumCVSS 5.5

Published: 09/06/2026(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

32th percentile - higher than 32% of all known CVEs

Summary

A vulnerability in Windows Push Notifications allows an authorized attacker to disclose sensitive information to an unauthorized actor locally.

Risk Assessment

The organization is at risk of sensitive data leakage from the push notification service, potentially leading to confidentiality breaches.

Recommendation

Apply the security update provided by the vendor as part of the Windows security patches immediately.

Original NVD description (English source)

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.