CVE-2026-83509
HighCVSS 7.0Summary
Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with user privileges could gain higher privileges, potentially leading to system compromise or malware installation.
Recommendation
Install the latest Windows security updates and restrict access to the Setup Files Cleanup feature.
Other vulnerabilities in Windows Setup Files Cleanup
See all- CVE-2026-83510High
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
- CVE-2026-83505High
Time-of-check time-of-use (TOCTOU) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
- CVE-2026-73027High
External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
- CVE-2026-69289High
Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS