Product:
Windows Push Notification Core
Summary
The Windows Push Notification Core has a vulnerability that allows an authorized attacker to expose sensitive information to an unauthorized actor. This can lead to the disclosure of information locally. The issue arises due to improper handling of sensitive data.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-59209 |
Exploitation
To exploit this vulnerability, an attacker with local access can leverage the weakness in the Windows Push Notification Core to gain unauthorized access to sensitive information. The attack requires low privileges and does not necessitate user interaction, making it easier for an attacker to execute.
Affected Products
- Windows Push Notification Core: Vulnerable to unauthorized information disclosure due to improper data handling.
Mitigation
To mitigate this vulnerability, users should ensure that they apply the latest security updates provided by Microsoft. Regularly updating the system and monitoring for any security advisories can help protect against potential exploitation.