A critical privilege escalation vulnerability in the Windows Push Notifications service allows an authenticated attacker to achieve full system compromise.

This flaw involves a race condition (CWE-362) and potential use after free (CWE-416) within the Windows Push Notifications component. It requires the attacker to hold local user privileges to trigger the improper synchronization and successfully elevate their access.

The ability to escalate privileges locally poses a severe risk to organizational security, as it allows a standard user to bypass security boundaries and execute code with administrative or system level permissions. With a CVSS score of 8.8, this vulnerability represents a High severity risk that could lead to full system compromise, data theft, and the installation of persistent malicious software.

Immediate Action: Apply the latest security updates provided by Microsoft via the Windows Update service or the Microsoft Update Catalog to patch the affected versions.

Proactive Monitoring: Monitor system logs for unusual process execution patterns or unexpected service crashes associated with the Windows Push Notifications service.

Compensating Controls: Ensure that principle of least privilege is strictly enforced on all workstations to minimize the number of users capable of executing local code.

Public Exploit Available: No (exploit_available: false)

Given the potential for full system compromise, IT administrators should prioritize the deployment of the relevant security patches across all affected Windows endpoints. Organizations should verify that their automated patch management systems are configured to receive and install these updates without delay to prevent local attackers from abusing this synchronization flaw.