Microsoft Windows Push Notifications Information Disclosure Vulnerability

A vulnerability in Windows Push Notifications allows an authorized attacker to disclose sensitive information locally. This issue arises from the exposure of information to an unauthorized actor, potentially leaking the address of a medium integrity process to a lower integrity caller process.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure, allowing an attacker to access sensitive data from a local process.

Remediation

Users can apply the security update for this vulnerability, which is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5101649, KB5095051, KB5099536, KB5099540, and KB5099539.