CVE-2026-83505
HighCVSS 7.0Summary
Time-of-check time-of-use (TOCTOU) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit the time window between check and use of a resource, potentially leading to privilege escalation and system takeover.
Recommendation
Install the latest Windows security updates and consider restricting access to the Setup Files Cleanup feature.
Other vulnerabilities in Windows Setup Files Cleanup
See all- CVE-2026-83510High
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
- CVE-2026-83509High
Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
- CVE-2026-73027High
External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
- CVE-2026-69289High
Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS