CVE-2026-729715.5MediumCWE-59
CVE-2026-72971: Microsoft Windows 11 version 26H1 vulnerability
Microsoft · Windows 11 version 26H1
Vendor fix available · Affected: Microsoft Windows 11 version 26H1 · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
0.4%probability of exploitation in the next 30 days
30th percentile
050100
Higher than 30% of scored CVEs
5.5MediumCVSS 3.1
LowMediumHighCrit.
DescriptionNVD
Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.
Coverage5 articles · 5 outlets
One row per outlet, in order of first report. First in our coverage: SecurityWeek, 11 Aug.
Quiet for 13 weekslast report 12 Aug5 articles5 outlets
- Tue 11 Aug, 18:58 UTC. SecurityWeek, first report. Microsoft Patch Tuesday Fixes Zero Day Winsock Flaw CVE-2026-68820.
- Tue 11 Aug, 20:11 UTC. SANS ISC, its first report on the story. Microsoft Patch Tuesday August 2026, (Tue, Aug 11th).
- Wed 12 Aug, 00:47 UTC. Rapid7, its first report on the story. Microsoft Fixes 421 Flaws Including SharePoint Zero Day.
- Wed 12 Aug, 03:40 UTC. SecurityOnline, its first report on the story. Microsoft Patch Tuesday Patches Critical WinSock Exploit.
- Wed 12 Aug, 09:11 UTC. Infosecurity, its first report on the story. Microsoft Fixes 400 Flaws on August Patch Tuesday.
- First report
- Article
- Running total
Show as tableHide table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| 11 Aug 18:58 | SecurityWeek | Microsoft Patch Tuesday Fixes Zero Day Winsock Flaw CVE-2026-68820 |
| 11 Aug 20:11 | SANS ISC | Microsoft Patch Tuesday August 2026, (Tue, Aug 11th) |
| 12 Aug 00:47 | Rapid7 | Microsoft Fixes 421 Flaws Including SharePoint Zero Day |
| 12 Aug 03:40 | SecurityOnline | Microsoft Patch Tuesday Patches Critical WinSock Exploit |
| 12 Aug 09:11 | Infosecurity | Microsoft Fixes 400 Flaws on August Patch Tuesday |
- Microsoft Fixes 400 Flaws on August Patch TuesdayInfosecurity · mentions it in passing
- Microsoft Patch Tuesday Patches Critical WinSock ExploitSecurityOnline · mentions it in passing
- Microsoft Fixes 421 Flaws Including SharePoint Zero DayRapid7 · mentions it in passing
- Microsoft Patch Tuesday August 2026, (Tue, Aug 11th)SANS ISC · mentions it in passing
- Microsoft Patch Tuesday Fixes Zero Day Winsock Flaw CVE-2026-68820SecurityWeek · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.