CVE-2026-72971

Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.

Scoring

Severity

MEDIUM

CVSS base score

5.5

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C

EPSS probability

0.47%

CWE

CWE-59

Published

2026-08-11

Last modified

2026-09-09

Affected products

• Microsoft Windows 11 version 26H1

Weakness type

• CWE-59

Related vulnerabilities

• CVE-2026-87766 — Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup
• CVE-2026-78622 — Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal
• CVE-2026-81963 — Windows Update Stack Elevation of Privilege Vulnerability
• CVE-2026-69425 — Windows NTFS Tampering Vulnerability
• CVE-2026-69289 — Windows Setup Files Cleanup Elevation of Privilege Vulnerability
• CVE-2026-83999 — Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
• CVE-2026-70563 — Windows Shell Spoofing Vulnerability
• CVE-2026-69771 — Windows Container Manager Service Security Feature Bypass Vulnerability

Markdown version · Browse all CVEs