CVE-2026-97810
Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability
Published Oct 13, 2026 · updated Oct 15, 2026 · Microsoft Windows 11 Version 24H2
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · CIRCL Vulnerability Lookup
Detected
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
Oct 15, 2026 · CIRCL Vulnerability Lookup
Updated
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
Affected
- vendor Microsoft Windows 11 Version 24H2version unspecified
- vendor Microsoft Windows 11 Version 25H2version unspecified
- vendor Microsoft Windows 11 Version 26H2version unspecified
- vendor Microsoft Windows 11 version 26H1version unspecified
- vendor Microsoft Windows Server 2022version unspecified
- vendor Microsoft Windows Server 2025version unspecified
- vendor Microsoft Windows Server 2025 (Server Core installation)version unspecified
Sources
- CIRCL Vulnerability LookupVulnerability recordCVE-2026-97810
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
vulnerability.circl.lu - CVE.orgVulnerability recordCVE-2026-97810
Official CVE identifier
cve.org