CVE-2026-69289
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit links to manipulate system files, potentially leading to privilege escalation.
Recommendation
Apply the security update from the vendor.
Other vulnerabilities in Windows Setup Files Cleanup
See all- CVE-2026-83510High
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
- CVE-2026-83509High
Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
- CVE-2026-83505High
Time-of-check time-of-use (TOCTOU) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
- CVE-2026-73027High
External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS