CVE-2026-73027
HighCVSS 7.8Summary
External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
Risk Assessment
Potential for unauthorized modification of system configuration, possibly leading to system integrity compromise.
Recommendation
Apply security updates and restrict access to setup files cleanup tools.
Other vulnerabilities in Windows Setup Files Cleanup
See all- CVE-2026-83510High
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
- CVE-2026-83509High
Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
- CVE-2026-83505High
Time-of-check time-of-use (TOCTOU) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
- CVE-2026-69289High
Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS