Any clue on this.
I found that this issue is happening at Notifications page URL. USER1 logged in and visited notification page.
then copied the URL and did logout.
USER2 logged in and pasted the URL, which was copied from above then Notification page is getting open which is having USER1 notifications.
so USER2 is able to see USER1 Notifications, how to overcome this issue.