VulnerabilityAnalyzed
CVE-2026-72971
Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.
MEDIUM 5.5EPSS 0.47%
Does this matter?
Lower severity and a low EPSS score (0.47%). Track it; it rarely justifies an emergency change on its own.
Description
Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- EPSS
- 0.47% probability · 40th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-59
- Affected
- microsoft/windows 11 26h1
- Source
- secure@microsoft.com
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72971Vendor Advisory, Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.