Summary
Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
Details
What could an attacker achieve by exploiting this vulnerability?
An attacker could exploit this vulnerability to make unauthorized modifications to protected system data. This could allow the attacker to alter system state or configuration beyond their normal privileges.
Security updates
10.0.20348.5622 — https://support.microsoft.com/help/5122882
10.0.19044.7725 — https://support.microsoft.com/help/5122878
10.0.26100.33438 — https://support.microsoft.com/help/5122871
10.0.26200.9445 — https://support.microsoft.com/help/5124008
10.0.22631.7582 — https://support.microsoft.com/help/5122880
10.0.28000.2954 — https://support.microsoft.com/help/5124012
Vulnerabilities 1
-
Medium 5.5
Windows Autopilot Tampering Vulnerability
Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally.
Revision history
-
#1
Information published.
References
-
CVE-2026-73004 Windows Autopilot Tampering Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73004
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss