CVE-2026-72971

CVE-2026-72971 applies to the Windows Container Isolation FS Filter Driver (unionfs.sys). The issue is improper link resolution before file access ("link following"), enabling a locally authenticated attacker with low privileges to tamper with files. CVSS 3.1 Base: 5.5 (Local, Low attack complexi...

EUVD-2026-56379

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-62772 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability

...

CVE-2026-62772 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability

...

CVE-2026-62772

The CVE-2026-62772 entry describes a heap-based buffer overflow in the Windows Container Isolation FS Filter Driver (unionfs.sys) that enables an authorized local attacker to elevate privileges. Affected component: Windows container isolation FS filter driver (unionfs.sys). Root cause: heap-based...

Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability

Incorrect authorization in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to disclose information locally...

Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability

Improper link resolution before file access 'link following' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to perform tampering locally...

PT-2026-70527

Name of the Vulnerable Software and Affected Versions Windows Container Isolation FS Filter Driver unionfs.sys affected versions not specified Description Incorrect authorization in the unionfs.sys driver allows an authorized attacker to disclose sensitive information locally and affect the syste...

CVE-2026-62772: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-62775: Incorrect Authorization

Incorrect authorization in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to disclose information locally...

PT-2026-70524

Name of the Vulnerable Software and Affected Versions Windows Container Isolation FS Filter Driver unionfs.sys affected versions not specified Description A heap-based buffer overflow occurs in the Windows Container Isolation FS Filter Driver unionfs.sys. This issue allows an authorized attacker ...

CVE-2026-72971: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to perform tampering locally...

SUSE-SU-2026:3536-1 Security update for podman

This update for podman fixes the following issues: - CVE-2026-55686: specially crafted image where the WORKDIR path contains a symlink allows for directory creation and ownership modification on the host filesystem bsc1268579. - CVE-2026-57231: specially crafted image can trick podman run into...

proot-distro has a Container Isolation Bypass via Crafted Restore Archive

Affected Component- Package: proot-distro- Affected command: restore- Attack surface: Host-side Termux CLI processing a user-supplied backup archive- Vulnerability type: Container Isolation Bypass / Cross-Container Read and Write--- Affected Versions| Component | Version ||---|---|| proot-distro ...

PYSEC-2026-3607 proot-distro has a Container Isolation Bypass via Crafted Restore Archive

Affected Component - Package: proot-distro - Affected command: restore - Attack surface: Host-side Termux CLI processing a user-supplied backup archive - Vulnerability type: Container Isolation Bypass / Cross-Container Read and Write --- Affected Versions | Component | Version | |---|---| |...

GHSA-7H3G-4W2F-FJ2F proot-distro has a Container Isolation Bypass via Crafted Restore Archive

Affected Component - Package: proot-distro - Affected command: restore - Attack surface: Host-side Termux CLI processing a user-supplied backup archive - Vulnerability type: Container Isolation Bypass / Cross-Container Read and Write --- Affected Versions | Component | Version | |---|---| |...

proot-distro has a Container Isolation Bypass via Crafted Restore Archive

Affected Component - Package: proot-distro - Affected command: restore - Attack surface: Host-side Termux CLI processing a user-supplied backup archive - Vulnerability type: Container Isolation Bypass / Cross-Container Read and Write --- Affected Versions | Component | Version | |---|---| |...

Exposure of Resource to Wrong Sphere

Overview proot-distro is a PRoot-Distro is a lightweight rootless Linux container management utility built around proot. Affected versions of this package are vulnerable to Exposure of Resource to Wrong Sphere in the restore process. An attacker can access sensitive files from other containers or...

CVE-2026-54727 proot-distro has a Container Isolation Bypass via Crafted Restore Archive

proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-distro restore accepted hardlink entries whose linkname referenced another installed container and did not verify that the hardlink source container matched the destination container being restored, allowing a...