CVE-2026-42991

Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

A use after free vulnerability in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

A use-after-free vulnerability in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.

A vulnerability in Windows Push Notifications allows an authorized attacker to disclose sensitive information locally. The issue stems from improper access control to data.

Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.