EUVD-2026-22396
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
AnalysisAI
Local privilege escalation in Windows Push Notifications across Windows 10/11 and Server 2016-2025 allows low-privileged authenticated users to gain SYSTEM-level access via race condition exploitation. The vulnerability affects all currently supported Windows versions with confirmed vendor patches available. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Inventory all Windows 10, 11, and Server 2016-2025 systems in your environment and confirm current patch levels. Within 7 days: Apply vendor-released security updates to all affected systems-prioritize domain controllers, privileged access workstations, and systems handling sensitive data. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today