CVE-2026-72971Vulnerability
Reported by 2 independent sources · first reported by Krebs on Security · last reported
Last reported 2 months ago
What the reports say
2 reports, newest first · the exact sentence from each-
Microsoft Fixes 400 Flaws on August Patch Tuesday“The second publicly disclosed zero day which has yet to be exploited in the wild is CVE-2026-72971: a Windows Container Isolation FS Filter Driver (unionfs.sys) tampering vulnerability.”
-
Microsoft Plugs Nearly 400 Security Holes“The other publicly disclosed flaw is CVE-2026-72971, a low-impact local tampering vulnerability that Microsoft reckons is unlikely to be exploited.”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-68820, CVE-2026-62832
Thanks — we review every report.