Microsoft Windows Push Notifications Information Disclosure Vulnerability

A vulnerability in Windows Push Notifications allows an authorized attacker to locally disclose information by exploiting the use of uninitialized resources. This issue affects multiple Windows products, including various versions of Windows 10, Windows 11, Windows Server 2016, 2019, 2022, and 2025, as well as Windows Server 2019 (Server Core installation) and Windows Server 2025 (Server Core installation).

Impact

Exploitation of this vulnerability could lead to unauthorized local information disclosure from uninitialized memory.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates can be downloaded via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles linked in the product-specific sections.