CVE-2026-83509
High · 7.0CVSS
7.0
EPSS
0.4%
Published
Oct 13, 2026
CISA due date
—
The record
Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-119333 draw.io Desktop is the official Electron build of draw.io. CWE-426
- CVE-2026-116243 pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binary path a user sets… CWE-426
- CVE-2026-57203 Asterisk is an open source private branch exchange and telephony toolkit. CWE-426
- CVE-2026-105477 A vulnerability in Veeam Agent for Linux allows for local privilege escalation. CWE-426
- CVE-2026-113461 Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to… CWE-426
- CVE-2026-83506 Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate… CWE-426
- CVE-2026-83505 Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows… CWE-426
- CVE-2026-70142 Untrusted search path in Windows Update Service allows an authorized attacker to elevate… CWE-426