H4Urek

**Name of the Vulnerable Software and Affected Versions** Windows Push Notifications (affected versions not specified) **Description** An improper synchronization of shared resources during concurrent execution, known as a race condition, allows an authorized attacker to elevate privileges locally. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Shell (affected versions not specified) **Description** A race condition occurs in Windows Shell due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally. A race condition is a situation where the system's substantive behavior is dependent on the sequence or timing of other uncontrollable events. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows USB Print Driver versions prior to April 2026 **Description** A heap-based buffer overflow in the Windows USB Printing Stack `usbprint.sys` allows an unauthorized attacker to elevate privileges. This issue can be exploited through a physical attack. **Recommendations** Update to the version released in April 2026.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** A heap-based buffer overflow exists in the Windows Telephony Service. This issue allows an unauthorized attacker to elevate privileges over an adjacent network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.