Vulnerability · NVD

CVE-2026-72971

CVE-2026-72971 : medium severity (CVSS 5.5). No tracked catalog app is linked to this CVE.

Severity (CVSS): 5.5
Exploitation: 0.4 %
Tracked apps: 0
Still exposed: 0

Published on 2026-08-11

Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.

Attack vector : Local No user interaction

Show raw CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS 0.36% exploit very unlikely percentile 27.5%

OS versions that fix this CVE

This CVE is resolved by the following OS security releases. Update the OS to at least the listed version.

Windows 11 26H1 · 2026-H1 Fixed in 10.0.28000.2704

View on NVD ↗ Advisory · msrc.microsoft.com

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM