diff --git a/Dockerfile.windows b/Dockerfile.windows
index 5ce2712797..ee9af9c425 100644
--- a/Dockerfile.windows
+++ b/Dockerfile.windows
@@ -44,7 +44,7 @@ ARG KUBERNETES_VERSION=dev
 
 # windows runtime image
 ENV CRICTL_VERSION="v1.29.0"
-ENV CALICO_VERSION="v3.27.2"
+ENV CALICO_VERSION="v3.27.3"
 ENV CNI_PLUGIN_VERSION="v1.4.0"
 ENV FLANNEL_VERSION="v0.25.0"
 ENV CNI_FLANNEL_VERSION="v1.4.0-flannel1"
diff --git a/charts/chart_versions.yaml b/charts/chart_versions.yaml
index e584bd057f..02c2714377 100644
--- a/charts/chart_versions.yaml
+++ b/charts/chart_versions.yaml
@@ -5,7 +5,7 @@ charts:
   - version: v3.27.2-build2024030800
     filename: /charts/rke2-canal.yaml
     bootstrap: true
-  - version: v3.27.200
+  - version: v3.27.300
     filename: /charts/rke2-calico.yaml
     bootstrap: true
   - version: v3.27.002
diff --git a/scripts/build-images b/scripts/build-images
index efd762c2b9..5b4eab730b 100755
--- a/scripts/build-images
+++ b/scripts/build-images
@@ -49,16 +49,16 @@ xargs -n1 -t docker image pull --quiet << EOF > build/images-cilium.txt
 EOF
 
 xargs -n1 -t docker image pull --quiet << EOF > build/images-calico.txt
-    ${REGISTRY}/rancher/mirrored-calico-operator:v1.32.5
-    ${REGISTRY}/rancher/mirrored-calico-ctl:v3.27.2
-    ${REGISTRY}/rancher/mirrored-calico-kube-controllers:v3.27.2
-    ${REGISTRY}/rancher/mirrored-calico-typha:v3.27.2
-    ${REGISTRY}/rancher/mirrored-calico-node:v3.27.2
-    ${REGISTRY}/rancher/mirrored-calico-pod2daemon-flexvol:v3.27.2
-    ${REGISTRY}/rancher/mirrored-calico-cni:v3.27.2
-    ${REGISTRY}/rancher/mirrored-calico-apiserver:v3.27.2
-    ${REGISTRY}/rancher/mirrored-calico-csi:v3.27.2
-    ${REGISTRY}/rancher/mirrored-calico-node-driver-registrar:v3.27.2
+    ${REGISTRY}/rancher/mirrored-calico-operator:v1.32.7
+    ${REGISTRY}/rancher/mirrored-calico-ctl:v3.27.3
+    ${REGISTRY}/rancher/mirrored-calico-kube-controllers:v3.27.3
+    ${REGISTRY}/rancher/mirrored-calico-typha:v3.27.3
+    ${REGISTRY}/rancher/mirrored-calico-node:v3.27.3
+    ${REGISTRY}/rancher/mirrored-calico-pod2daemon-flexvol:v3.27.3
+    ${REGISTRY}/rancher/mirrored-calico-cni:v3.27.3
+    ${REGISTRY}/rancher/mirrored-calico-apiserver:v3.27.3
+    ${REGISTRY}/rancher/mirrored-calico-csi:v3.27.3
+    ${REGISTRY}/rancher/mirrored-calico-node-driver-registrar:v3.27.3
 EOF
 
 if [ "${GOARCH}" != "arm64" ]; then