Microsoft disclosed CVE-2026-40409 on June 9, 2026, as an elevation-of-privilege vulnerability in the Windows Universal Disk Format File System Driver, the kernel component that lets Windows mount and interpret UDF-formatted optical and removable media across supported client and server...