CVE-2026-50339

EPSS 0.35%
Veröffentlicht 14.07.2026 17:06:40
Zuletzt bearbeitet 22.07.2026 16:17:42
Erkennungen
Login

Windows Push Notification Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 17 VulnDex Vulnerability Enrichment 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Windows 10 1809 HwPlatform x64 Version < 10.0.17763.9020

Microsoft ≫ Windows 10 1809 HwPlatform x86 Version < 10.0.17763.9020

Microsoft ≫ Windows 10 21h2 HwPlatform arm64 Version < 10.0.19044.7548

Microsoft ≫ Windows 10 21h2 HwPlatform x64 Version < 10.0.19044.7548

Microsoft ≫ Windows 10 21h2 HwPlatform x86 Version < 10.0.19044.7548

Microsoft ≫ Windows 10 22h2 HwPlatform arm64 Version < 10.0.19045.7548

Microsoft ≫ Windows 10 22h2 HwPlatform x64 Version < 10.0.19045.7548

Microsoft ≫ Windows 10 22h2 HwPlatform x86 Version < 10.0.19045.7548

Microsoft ≫ Windows 11 24h2 HwPlatform arm64 Version < 10.0.26100.8875

Microsoft ≫ Windows 11 24h2 HwPlatform x64 Version < 10.0.26100.8875

Microsoft ≫ Windows 11 25h2 HwPlatform arm64 Version < 10.0.26200.8875

Microsoft ≫ Windows 11 25h2 HwPlatform x64 Version < 10.0.26200.8875

Microsoft ≫ Windows 11 26h1 HwPlatform x64 Version < 10.0.28000.2269

Microsoft ≫ Windows 11 26h1 HwPlatform arm64 Version < 10.0.28000.2525

Microsoft ≫ Windows Server 2019 Version < 10.0.17763.9020

Microsoft ≫ Windows Server 2022 Version < 10.0.20348.5386

Microsoft ≫ Windows Server 2025 Version < 10.0.26100.33158

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.35%	0.277

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Microsoft	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50339

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-50339

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-50339

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-50339

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-50339