Microsoft Windows Push Notifications Privilege Escalation Vulnerability

A type confusion vulnerability in Windows Push Notifications has been identified, allowing an authorized attacker to locally elevate privileges. This issue arises from the access of resources using incompatible types, which can be exploited to gain higher privileges in the affected system.

Impact

Exploitation of this vulnerability could allow an attacker to elevate privileges from a Low Integrity Level in a sandboxed environment to a Medium Integrity Level.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates can be downloaded via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5063709, KB5063880, KB5063877, KB5063875, KB5063950, KB5063906, KB5063871, and KB5063889.