CVE-2026-69648
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
Use-after-free in Windows Notification allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could gain elevated privileges, potentially leading to full system compromise.
Recommendation
Apply the latest Windows security updates.
Other vulnerabilities in Windows Notification
See all- CVE-2026-83854Medium
Improper access control in Windows Notification allows an authorized attacker to disclose information locally.
- CVE-2026-50337High
Incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate privileges locally.
- CVE-2026-50334Medium
A vulnerability in Windows Notification allows an authorized attacker to disclose sensitive information locally. The issue stems from improper access control to data.
Original NVD description (English source)
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS