Summary
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
Details
What privileges could be gained by an attacker who successfully exploited the vulnerability?
An attacker could use this vulnerability to elevate privileges from a Low Integrity Level in a contained ("sandboxed") execution environment to a Medium Integrity Level.
Please refer to AppContainer isolation and Mandatory Integrity Control for more information.
Security updates
10.0.17763.7678 — https://support.microsoft.com/help/5063877
10.0.20348.4052 — https://support.microsoft.com/help/5063880
10.0.20348.3989 — https://support.microsoft.com/help/5063812
10.0.19044.6216 — https://support.microsoft.com/help/5063709
10.0.22621.5768 — https://support.microsoft.com/help/5063875
10.0.26100.4946 — https://support.microsoft.com/help/5063878
10.0.26100.4851 — https://support.microsoft.com/help/5064010
10.0.25398.1791 — https://support.microsoft.com/help/5063899
10.0.10240.21100 — https://support.microsoft.com/help/5063889
10.0.14393.8330 — https://support.microsoft.com/help/5063871
6.2.9200.25622 — https://support.microsoft.com/help/5063906
6.3.9600.22725 — https://support.microsoft.com/help/5063950
Vulnerabilities 1
-
High 7.8
Windows Push Notifications Apps Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
Revision history
-
#1
Information published.
References
-
CVE-2025-53724 Windows Push Notifications Apps Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53724
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss