This vulnerability (CWE-200) in Windows 10 Version 1809 allows an authorized local attacker to disclose sensitive information via the Windows Push Notifications component. The flaw does not require user interaction and impacts confidentiality without affecting integrity or availability. The CVSS 3.1 base score is 5.5, reflecting a medium severity with local attack vector, low attack complexity, and low privileges required. Microsoft has published an official fix to address this issue.

An authorized local attacker can gain access to sensitive information that should be protected, potentially leading to information disclosure. There is no impact on system integrity or availability. The vulnerability does not require user interaction but does require the attacker to have some level of privileges on the affected system.

Microsoft has released an official fix for this vulnerability. It is recommended to apply the security update provided by Microsoft for Windows 10 Version 1809 as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50339. No additional mitigations are required once the patch is applied.