Product:
Windows Push Notification Core
Summary
The Windows Push Notification Core has a vulnerability that allows an authorized attacker to disclose sensitive information locally. This exposure can lead to unauthorized access to confidential data. The issue arises from insufficient protection of sensitive information.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-59211 |
Exploitation
To exploit this vulnerability, an attacker with local access can leverage the weakness in the Windows Push Notification Core to gain unauthorized access to sensitive information. The attack requires low privileges and does not necessitate user interaction, making it relatively straightforward for an attacker with physical access to the system.
Affected Products
- Windows Push Notification Core: Vulnerable to unauthorized information disclosure due to insufficient protection mechanisms.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Users should ensure that their systems are up to date and follow best practices for securing local access to sensitive information.