CVE-2026-72971

Microsoft · Published August 11, 2026

5.5

CVSS v3.1

MEDIUM

Patch availableGet patch

Description

Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability. Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.

Affected Products

Windows 11 version 26H1 for x64-based Systems
Windows 11 Version 26H1 for ARM64-based Systems

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C