Oct 2026: Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerab
CVE-2026-97792 Published on October 13, 2026

Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability
Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

Vendor Advisory NVD

Weakness Type

Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. When a resource is given a permissions setting that provides access to a wider range of actors than required, it could lead to the exposure of sensitive information, or the modification of that resource by unintended parties. This is especially dangerous when the resource is related to program configuration, execution or sensitive user data.


Products Associated with CVE-2026-97792

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

 
 
 
 
 
 

Affected Versions

Microsoft Windows 11 version 23H2: Microsoft Windows 11 Version 23H2: Microsoft Windows 11 Version 24H2: Microsoft Windows 11 Version 25H2: Microsoft Windows 11 Version 26H2: Microsoft Windows Server 2022: Microsoft Windows Server 2025: Microsoft Windows Server 2025 (Server Core installation):