CVE-2026-69303: Push Message Routing Service Information Disclosure Vulnerability
Published Sep 8, 2026
·Updated
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally.
Other sources
Push Message Routing Service Information Disclosure Vulnerability
— Microsoft
Event History
Sep 8, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
CVE Published
via MITRE·05:15 PM
Data Sourced
via MITRE·05:15 PM
DescriptionSeverity
Data Sourced
via NVD·06:18 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this vulnerability?
An attacker must be authorized on the affected system and have local access. The available data does not indicate that remote or unauthenticated attackers can exploit it.
2
What is the impact if exploitation succeeds?
Successful exploitation can disclose information. The provided vector indicates high confidentiality impact, with no stated integrity or availability impact.
3
Does exploitation require user interaction or special attack complexity?
The provided vector indicates no user interaction is required and low attack complexity. It also indicates low privileges are required.