Exploit for Use After Free in Microsoft

CVE-2026-42978

githubexploit · 2026-09-11

Description

Use-After-Free and race condition in Windows Push Notifications (WpnService) with PoC research.

Affected software

Microsoft Windows 10 1809< 10.0.17763.8880

Microsoft Windows 10 21h2< 10.0.19044.7417

Microsoft Windows 10 22h2< 10.0.19045.7417

Microsoft Windows 11 23h2< 10.0.22631.7219

CVSS 7.8 for CVE-2026-42978

7.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector:LOCAL

Attack Complexity:HIGH

Privileges Required:LOW

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

61%confidence this exploit runs

Based on 1 file(s) in the source

EPSS Score

0.2%higher than 15.8% of all CVEs

Updated 2026-09-11

Exploit Details

Modified:2026-09-11 20:00

Last Seen:2026-09-11 20:02

Reporter:SyntaxMethod

Other exploits for CVE-2026-42978

CVE-2026-42978-PoC-Research

2026-09-11 KitPloitKITPLOIT

Exploit for Use After Free in Microsoft

2026-06-23 grizzzerGITHUB

Exploit Code

README3 lines

## https://sploitus.com/exploit?id=BFC6879E-FC83-58F4-9A74-5DE915C4DB33
# CVE-2026-42978-PoC-Research
CVE-2026-42978 Windows Push Notifications (WpnService) Use-After-Free &amp; Race Condition PoC research, diagnostic scanner, and security audit module for AI Security Tool.

Exploit Code

Share

Share on social media: