CVE-2026-69300: CWE-416: Use After Free in Microsoft Windows 11 version 23H2

This vulnerability (CVE-2026-69300) involves a use-after-free condition in the Windows Push Notifications component of Microsoft Windows 11 version 23H2. An authorized attacker with local access can exploit this flaw to elevate their privileges on the affected system. The CVSS 3.1 vector indicates that the attack requires local access with high attack complexity and low privileges, but no user interaction. The impact includes high confidentiality, integrity, and availability impacts. Microsoft has published an official fix for this vulnerability.

Successful exploitation allows an authorized local attacker to elevate privileges, potentially gaining higher system rights. The vulnerability impacts confidentiality, integrity, and availability at a high level. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for Windows 11 version 23H2 to remediate this vulnerability. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69300 for update details.