CVE-2026-72971

MEDIUM5.5Published on August 11, 2026

Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.

CVSS score5.5 / 10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness type (CWE)CWE-59

Microsoft corregge 421 vulnerabilità: sfruttato uno zero-day in `afd.sys`

Vulnerabilities

Microsoft Fixes 421 Vulnerabilities, Including an Exploited Zero-Day in `afd.sys`

On August 11, 2026, Microsoft released security updates addressing 421 vulnerabilities. One of them is CVE-2026-68820 , a high-severity flaw actively

Aug 11, 20263 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Microsoft Fixes 421 Vulnerabilities, Including an Exploited Zero-Day in `afd.sys`