Executive brief
Windows Notification is a core Windows operating system component that displays system alerts and user notifications. A use-after-free vulnerability allows an authorized local user to escalate their privileges to a higher level of system access, potentially enabling full control of the affected machine.
Technical details
The vulnerability is a use-after-free memory safety issue in the Windows Notification subsystem. It requires an authorized attacker with local access to the system. By exploiting this memory corruption flaw, an attacker can elevate their privileges from a standard user account to a higher privilege level (likely SYSTEM). The vulnerability is not currently known to be exploited in the wild, and patches are expected to be available from Microsoft.
Affected products
- Microsoft Windows <UNKNOWN>
Timeline
- 2026-09-08: disclosed