Vulnerability intelligence

CVE-2026-72971

Microsoft Windows 11 version 26H1 CWE-59

Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.

CVSS Score

5.5

Medium

EPSS — Exploit Probability

0.4%

Riskier than 28% of all CVEs · checked 2026-09-27

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published

NVD entry Vendor patch PoC / advisory

5 articles across 5 outlets · first covered Aug 11, 2026 · latest Aug 12, 2026

Coverage timeline

Microsoft Fixes 400 Flaws on August Patch Tuesday
www.infosecurity-magazine.com · Aug 12, 2026
Microsoft Patch Tuesday Patches Critical WinSock Exploit
securityonline.info · Aug 12, 2026
Microsoft Fixes 421 Flaws Including SharePoint Zero Day
www.rapid7.com · Aug 12, 2026
Microsoft Patch Tuesday August 2026, (Tue, Aug 11th)
isc.sans.edu · Aug 11, 2026
Microsoft Patch Tuesday Fixes Zero Day Winsock Flaw CVE-2026-68820
www.securityweek.com · Aug 11, 2026

Related CVEs — Microsoft

CVE-2026-65660KEV CVE-2026-85880KEV CVE-2025-32711 CVE-2019-0708KEV CVE-2020-0688KEV CVE-2026-85921 CVE-2026-55945 CVE-2026-62721