CVE Catalog

CVE-2026-72971

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.36%

29th percentile - higher than 29% of all known CVEs

Summary

Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.

Risk Assessment

An attacker with local privileges can modify files in a way that compromises integrity, potentially leading to privilege escalation or container isolation breach.

Recommendation

Apply relevant Windows updates that fix this issue and monitor vendor recommendations.

Original NVD description (English source)

Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS