CVE-2026-73027

The Windows Setup Files Cleanup component is vulnerable to an elevation of privilege vulnerability due to external control of system or configuration settings. This flaw allows an authorized attacker to perform a local privilege escalation. While the impact is categorized as High for confidential...

CVE-2026-83505

A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Setup Files Cleanup component. This vulnerability allows an authorized attacker to achieve local privilege elevation . The issue is categorized under CWE-367 and CWE-426 . While the risk is characterized as high, there are ...

CVE-2026-83510

A Time-of-check time-of-use (TOCTOU) race condition exists in Windows Setup Files Cleanup . This vulnerability allows an authorized attacker to achieve local privilege escalation . The security impact includes high consequences for confidentiality, integrity, and availability. While the vulnerabi...

CVE-2026-107917

Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified through testing in a controlled research environment using a...

CVE-2026-107918

Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router.This issue was identified through testing in a controlled research environment using a...

CVE-2026-107918 Insufficient input validation vulnerability in NETGEAR R7300

Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router.This issue was identified through testing in a controlled research environment using a...

CVE-2026-107918

The NETGEAR R7300 router contains an insufficient input validation vulnerability within its LAN Setup feature. This flaw allows authenticated administrators connected to the local network to perform unauthorized actions on the device. This issue was identified via research testing on a simulated ...

CVE-2026-107917

The NETGEAR R7300 router contains an insufficient input validation vulnerability within the PPPoE Setup feature. This flaw allows authenticated administrators connected to the local network to perform unauthorized actions on the device. The vulnerability was identified via testing in a controlled...

CVE-2026-107917 Insufficient input validation vulnerability in NETGEAR R7300 router

Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified through testing in a controlled research environment using a...

CVE-2026-107917 Insufficient input validation vulnerability in NETGEAR R7300 router

Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified through testing in a controlled research environment using a...

CVE-2026-4869

A potential privilege escalation issue exists in InstallShield version 2025 R2 and earlier . The vulnerability occurs when a local administrator executes a compressed Basic MSI setup with Prerequisites from an insecure location. Because the Prerequisite installers may also be loaded from an unsec...

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

Windows Setup and Deployment Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally...

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

PT-2026-112407

Name of the Vulnerable Software and Affected Versions Windows Setup Files Cleanup affected versions not specified Description A time-of-check time-of-use toctou race condition exists in Windows Setup Files Cleanup. This occurs when a program checks the state of a resource before using it, but the...

PT-2026-113226

Name of the Vulnerable Software and Affected Versions Windows Setup and Deployment affected versions not specified Description A missing authentication requirement for a critical function allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no...

PT-2026-111619

🚨 CVE-2026-107917 Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified through testing in a controlled research...

Microsoft Windows: CVE-2026-83509: Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...