CVE-2026-73027

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

High7.8EPSS 0.52%

Published: 13 Oct 2026
Updated: 31 Oct 2026
Reserved: 10 Aug 2026
Assigned by: microsoft

Description

External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

Scores

CVSS scores of CVE-2026-73027, by who scored it
Scored by	CVSS	Score	Vector
microsoftCNA (assigner)	3.1	High7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
NVDNVD · Analyzed	3.1	High7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS (exploitation in 30 days): 0.52% · top 56% of all CVEs (6 Nov 2026)
CISA SSVC: Exploitation: none · Automatable: no · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Weakness

CWE-15: External Control of System or Configuration Setting (opens in a new tab)All about CWE-15 and its CVEs

Affected products

Microsoft · Windows 10 Version 1607
- affected 10.0.14393.0 – < 10.0.14393.9612
Microsoft · Windows 10 Version 1809
- affected 10.0.17763.0 – < 10.0.17763.9376
Microsoft · Windows 10 Version 21H2
- affected 10.0.19044.0 – < 10.0.19044.7807
Microsoft · Windows 10 Version 22H2
- affected 10.0.19045.0 – < 10.0.19045.7807
Microsoft · Windows 11 version 23H2
- affected 10.0.22631.0 – < 10.0.22631.7652
Microsoft · Windows 11 Version 23H2
- affected 10.0.22631.0 – < 10.0.22631.7652
Microsoft · Windows 11 Version 24H2
- affected 10.0.26100.0 – < 10.0.26100.9711
Microsoft · Windows 11 Version 25H2
- affected 10.0.26200.0 – < 10.0.26200.9711
Microsoft · Windows 11 version 26H1
- affected 10.0.28000.0 – < 10.0.28000.3231
Microsoft · Windows 11 Version 26H2
- affected 10.0.26300.0 – < 10.0.26300.9711
Microsoft · Windows Server 2012
- affected 6.2.9200.0 – < 6.2.9200.26434
Microsoft · Windows Server 2012 (Server Core installation)
- affected 6.2.9200.0 – < 6.2.9200.26434
Microsoft · Windows Server 2012 R2
- affected 6.3.9600.0 – < 6.3.9600.23470
Microsoft · Windows Server 2012 R2 (Server Core installation)
- affected 6.3.9600.0 – < 6.3.9600.23470
Microsoft · Windows Server 2016
- affected 10.0.14393.0 – < 10.0.14393.9612
Microsoft · Windows Server 2016 (Server Core installation)
- affected 10.0.14393.0 – < 10.0.14393.9612
Microsoft · Windows Server 2019
- affected 10.0.17763.0 – < 10.0.17763.9376
Microsoft · Windows Server 2019 (Server Core installation)
- affected 10.0.17763.0 – < 10.0.17763.9376
Microsoft · Windows Server 2022
- affected 10.0.20348.0 – < 10.0.20348.5761
Microsoft · Windows Server 2025
- affected 10.0.26100.0 – < 10.0.26100.33650
Microsoft · Windows Server 2025 (Server Core installation)
- affected 10.0.26100.0 – < 10.0.26100.33650

References (1)

Windows Setup Files Cleanup Elevation of Privilege Vulnerability (opens in a new tab)vendor-advisorypatch

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2026-73027](https://trackcve.app/badge/CVE-2026-73027.svg)](https://trackcve.app/cve/CVE-2026-73027)

Record last updated 31 Oct 2026, 18:08 UTC.