CVE Catalog
CVE-2026-72971
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.36%
29th percentile - higher than 29% of all known CVEs
Summary
Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.
Risk Assessment
An attacker with local privileges can modify files in a way that compromises integrity, potentially leading to privilege escalation or container isolation breach.
Recommendation
Apply relevant Windows updates that fix this issue and monitor vendor recommendations.
Original NVD description (English source)
Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.

