CVE-2026-73004
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally.
Risk Assessment
An attacker could alter configuration or data, potentially disrupting system operations.
Recommendation
Apply security updates and enable authentication for critical functions.
Other vulnerabilities in Windows Autopilot
See all- CVE-2026-65783High
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
- CVE-2026-65782High
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
- CVE-2026-65781High
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
- CVE-2026-65780High
Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
- CVE-2026-65779High
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
- CVE-2026-65778High
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS