cbcvebase.
CVE-2026-24282
published 2026-03-10

CVE-2026-24282: Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally.

medium5.5CVSS 3.1
AVLACLPRLUINSUCHINAN
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally.

Affected

35 ranges· showing 25
VendorProductVersion rangeFixed in
microsoftwindows_10_1607< 10.0.14393.895710.0.14393.8957
microsoftwindows_10_1809< 10.0.17763.851110.0.17763.8511
microsoftwindows_10_21h2< 10.0.19044.705810.0.19044.7058
microsoftwindows_10_22h2< 10.0.19045.705810.0.19045.7058
microsoftwindows_10_version_1607>= 10.0.14393.0 < 10.0.14393.895710.0.14393.8957
microsoftwindows_10_version_1809>= 10.0.17763.0 < 10.0.17763.851110.0.17763.8511
microsoftwindows_10_version_21h2>= 10.0.19044.0 < 10.0.19044.705810.0.19044.7058
microsoftwindows_10_version_22h2>= 10.0.19045.0 < 10.0.19045.705810.0.19045.7058
microsoftwindows_11_23h2< 10.0.22631.678310.0.22631.6783
microsoftwindows_11_24h2< 10.0.26100.797910.0.26100.7979
microsoftwindows_11_25h2< 10.0.26200.797910.0.26200.7979
microsoftwindows_11_26h1< 10.0.28000.171910.0.28000.1719
microsoftwindows_11_version_22h3>= 10.0.22631.0 < 10.0.22631.678310.0.22631.6783
microsoftwindows_11_version_23h2>= 10.0.22631.0 < 10.0.22631.678310.0.22631.6783
microsoftwindows_11_version_24h2>= 10.0.26100.0 < 10.0.26100.803710.0.26100.8037
microsoftwindows_11_version_25h2>= 10.0.26200.0 < 10.0.26200.803710.0.26200.8037
microsoftwindows_11_version_26h1>= 10.0.28000.0 < 10.0.28000.171910.0.28000.1719
msrcwindows_10_version_1607_for_32-bit_systems
msrcwindows_10_version_1607_for_x64-based_systems
msrcwindows_10_version_1809_for_32-bit_systems
msrcwindows_10_version_1809_for_x64-based_systems
msrcwindows_10_version_21h2_for_32-bit_systems
msrcwindows_10_version_21h2_for_arm64-based_systems
msrcwindows_10_version_21h2_for_x64-based_systems
msrcwindows_10_version_22h2_for_32-bit_systems