EUVD-2026-73064
GHSA-qjfr-h47v-47c8
Severity by source
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Local symlink race requires low privilege and high complexity; only confidentiality is impacted as no write or availability consequence is described.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
4DescriptionCVE.org
Improper link resolution before file access ('link following') in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally.
AnalysisAI
Symlink-following in Windows Container Manager Service allows a local low-privileged authenticated user to bypass a security feature and read files outside the intended access boundary. Affected are Windows 11 versions 23H2, 24H2, 25H2, and 26H1 across specific build ranges, per EUVD. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an existing local user account on the target Windows 11 system (PR:L), meaning the attacker must already have some form of authenticated access - remote unauthenticated attackers cannot exploit this directly. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS base score of 4.7 reflects a genuinely moderate, context-bounded risk. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft security update that raises each affected Windows 11 build to or above the patched thresholds: 10.0.22631.7582 for 23H2, 10.0.26100.9445 for 24H2, 10.0.26200.9445 for 25H2, and 10.0.28000.2954 for 26H1. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-59 – Improper Link Resolution Before File Access
View allShare
External POC / Exploit Code
Leaving vuln.today