SB2026041508 - Multiple vulnerabilities in Microsoft Windows Push Notifications

Description

This security bulletin contains information about 5 secuirty vulnerabilities.

1) Race condition (CVE-ID: CVE-2026-26167)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition in Windows Push Notifications. A local user can exploit the race and escalate privileges on the system.

2) Race condition (CVE-ID: CVE-2026-32159)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race conditio in Windows Push Notificationsn. A local user can exploit the race and escalate privileges on the system.

3) Race condition (CVE-ID: CVE-2026-26172)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition in Windows Push Notifications. A local user can exploit the race and escalate privileges on the system.

4) Race condition (CVE-ID: CVE-2026-32160)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition in Windows Push Notifications. A local user can exploit the race and escalate privileges on the system.

5) Race condition (CVE-ID: CVE-2026-32158)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition in Windows Push Notifications. A local user can exploit the race and escalate privileges on the system.

Remediation

Install update from vendor's website.

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26167
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32159
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26172
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32160
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32158