Microsoft Windows Push Notification Core Information Disclosure Vulnerability

Vulnerability

A vulnerability allowing unauthorized information disclosure has been identified in Windows Push Notification Core. This issue allows an authorized attacker to locally disclose sensitive information by exploiting the vulnerability. The vulnerability affects multiple Windows products, including various versions of Windows Server, Windows 10, and Windows 11.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, potentially allowing an attacker to read portions of heap memory.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles linked within the security update guide.

Added: Oct 14, 2025, 6:37 PM
Updated: Oct 14, 2025, 9:09 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
2.5
exploitability
3.3
remediation
7.7
relevance
0.7
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.