Microsoft Windows Push Notifications Elevation of Privilege Vulnerability

A race condition vulnerability has been identified in Windows Push Notifications, allowing an authorized attacker to locally elevate privileges. This issue arises from concurrent execution using shared resources without proper synchronization.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update for this vulnerability through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5082200 for various Windows 10 versions, KB5082052 for Windows 11 versions 23H2 and 24H2, KB5083768 for Windows 11 version 26H1, and KB5082063 for Windows Server 2025. For Windows Server 2022 and 2019, the relevant update is also available through the Microsoft Update Catalog.