cve-2026-42973

CVE-2026-42973 is a Windows Push Notification information disclosure vulnerability addressed in the June 2026 security update cycle. Microsoft listed it in the Security Update Guide, affecting supported Windows platforms. While not a remote-code-execution flaw, information disclosure bugs like this can be exploited as part of a larger attack chain. The vulnerability highlights the growing attack surface of Windows' service-connected features. Discussions on WindowsForum cover patch guidance and the broader implications for enterprise IT security, emphasizing the need to treat such disclosures seriously despite their lower profile.