Microsoft Windows Push Notifications Privilege Escalation Vulnerability

A type confusion vulnerability has been identified in the Windows Push Notifications component, allowing an authorized attacker to elevate privileges locally. This issue affects multiple Windows versions, including various server and client editions.

Impact

Exploitation of this vulnerability could allow an attacker to elevate privileges from a low to a medium integrity level.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates can be downloaded via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5063871, KB5063889, KB5063906, KB5063950, KB5063875, KB5063709, KB5063880, KB5063812, KB5063877, and KB5063899.