Microsoft disclosed CVE-2026-40404 on June 9, 2026, as a Windows Universal Disk Format File System Driver elevation-of-privilege vulnerability affecting supported Windows systems through the UDFS component that parses and mounts UDF-formatted media and images. The dry title hides the important...
Microsoft disclosed CVE-2026-40409 on June 9, 2026, as an elevation-of-privilege vulnerability in the Windows Universal Disk Format File System Driver, the kernel component that lets Windows mount and interpret UDF-formatted optical and removable media across supported client and server...