{"id":"CVE-2026-112753","kind":"vulnerability","aliases":["CVE-2026-112753"],"related":[],"title":"Windows Container Isolation driver type confusion lets local users gain privileges","description":"Access of resource using incompatible type ('type confusion') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.","summary":"A type confusion flaw in the Windows Container Isolation FS Filter Driver (unionfs.sys) lets an authorized attacker raise their privileges on the local machine. The sources rate it high (CVSS 7.0) and do not report active exploitation.","severity":"high","cvss":7.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["containers","infrastructure","windows"],"not_affected_if":["no-windows-containers"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:18:35+00:00","first_seen_at":"2026-11-10T19:24:31+00:00","triaged_at":"2026-11-10T19:53:50+00:00","updated_at":"2026-11-10T19:53:50+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:53:50Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Container Isolation driver type confusion lets local users gain privileges","impact":"high","summary":"A type confusion flaw in the Windows Container Isolation FS Filter Driver (unionfs.sys) lets an authorized attacker raise their privileges on the local machine. The sources rate it high (CVSS 7.0) and do not report active exploitation.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","containers"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains elevated privileges on the host","analyst_note":"Check the Microsoft Security Update Guide entry for affected Windows builds, the fixed patch, and whether unionfs.sys loads by default.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-windows-containers"],"who_is_affected":"Machines running Windows container features where the Container Isolation filter driver is present are the ones to look at. The sources do not name the affected Windows builds or whether the driver loads by default. Teams that run no Windows containers may be able to skip it, but the sources do not confirm this.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000682,"input_tokens":4516,"output_tokens":460,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Check the Microsoft Security Update Guide entry for affected Windows builds, the fixed patch, and whether unionfs.sys loads by default.","search":"'-112753':14A,17A '-2026':13A,16A '7.0':51B 'access':58C 'activ':56B 'allow':74C 'attack':37B,77C 'author':36B,76C 'confus':6A,23B,65C 'contain':2A,18B,28B,68C 'cve':12A,15A 'cvss':50B 'driver':4A,32B,72C 'elev':79C 'exploit':57B 'filter':31B,71C 'flaw':24B 'fs':30B,70C 'gain':10A 'high':49B 'incompat':62C 'infrastructur':19B 'isol':3A,29B,69C 'let':7A,34B 'local':8A,43B,81C 'machin':44B 'privileg':11A,40B,80C 'rais':38B 'rate':47B 'report':55B 'resourc':60C 'sourc':46B 'type':5A,22B,63C,64C 'unionfs.sys':33B,73C 'use':61C 'user':9A 'window':1A,20B,27B,67C","nicknames":[],"mitigations":[],"who_affected":"Machines running Windows container features where the Container Isolation filter driver is present are the ones to look at. The sources do not name the affected Windows builds or whether the driver loads by default. Teams that run no Windows containers may be able to skip it, but the sources do not confirm this.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["containers","high","infrastructure","windows"],"campaign_type":null,"search_a":"'-112753':14A,17A '-2026':13A,16A 'confus':6A 'contain':2A 'cve':12A,15A 'driver':4A 'gain':10A 'isol':3A 'let':7A 'local':8A 'privileg':11A 'type':5A 'user':9A 'window':1A","search_b":"'7.0':51B 'activ':56B 'attack':37B 'author':36B 'confus':23B 'contain':18B,28B 'cvss':50B 'driver':32B 'exploit':57B 'filter':31B 'flaw':24B 'fs':30B 'high':49B 'infrastructur':19B 'isol':29B 'let':34B 'local':43B 'machin':44B 'privileg':40B 'rais':38B 'rate':47B 'report':55B 'sourc':46B 'type':22B 'unionfs.sys':33B 'window':20B,27B","search_c":"'access':58C 'allow':74C 'attack':77C 'author':76C 'confus':65C 'contain':68C 'driver':72C 'elev':79C 'filter':71C 'fs':70C 'incompat':62C 'isol':69C 'local':81C 'privileg':80C 'resourc':60C 'type':63C,64C 'unionfs.sys':73C 'use':61C 'window':67C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:18:35+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112753","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112753","severity":null,"published_at":"2026-11-10T19:18:35+00:00","modified_at":"2026-11-10T19:18:36+00:00","first_seen_at":"2026-11-10T19:24:31+00:00","fetched_at":"2026-11-10T19:24:31+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}