CVE-2026-83854
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
Improper access control in Windows Notification allows an authorized attacker to disclose information locally.
Risk Assessment
An authorized attacker could access sensitive data, potentially leading to information disclosure.
Recommendation
Apply the latest Windows security updates.
Other vulnerabilities in Windows Notification
See all- CVE-2026-69648High
Use-after-free in Windows Notification allows an authorized attacker to elevate privileges locally.
- CVE-2026-50337High
Incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate privileges locally.
- CVE-2026-50334Medium
A vulnerability in Windows Notification allows an authorized attacker to disclose sensitive information locally. The issue stems from improper access control to data.
Original NVD description (English source)
Improper access control in Windows Notification allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS