CVE-2026-44800: Windows Push Notifications Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
Other sources
Windows Push Notifications Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.2269Patch KB5095051 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.8875Patch KB5101650 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.8875Patch KB5101650 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33158Patch KB5099536 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.7376Patch KB5099414 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.2525Patch KB5101649
Event History
Frequently Asked Questions
What is the severity of CVE-2026-44800?
CVE-2026-44800 has a severity rating of high with a score of 7.8.
What is CVE-2026-44800?
CVE-2026-44800 is a vulnerability in Windows Push Notifications that allows an authorized attacker to elevate privileges due to a race condition.
Which systems are affected by CVE-2026-44800?
CVE-2026-44800 affects Microsoft Windows 11 and Microsoft Windows Server 2025.
How do I fix CVE-2026-44800?
To fix CVE-2026-44800, ensure that you apply the latest security updates provided by Microsoft for your respective operating system.
What type of vulnerability is CVE-2026-44800 classified as?
CVE-2026-44800 is classified as an elevation of privilege vulnerability caused by a race condition.