CVE-2026-42991 is a Microsoft-confirmed Windows Push Notifications elevation-of-privilege vulnerability disclosed on June 9, 2026, affecting supported Windows client and server releases and allowing a local authenticated attacker to gain higher privileges through a race-condition-style flaw. The...