Skip to content

Exploited: 178

LatestCVE-2026-95731 — Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative Access

9.8

CVE-2026-83780Fix available

Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.

Microsoft Windows 10 16072026-10-13 19:20 UTC1 min readRead in

Summary

Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.

Remediation

Inventory every Microsoft Windows 10 1607 deployment, including staging.
Upgrade Microsoft Windows 10 1607 to the fixed version for your release line, listed under Affected versions.
Confirm the running version after the upgrade.

References

Patchhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83780

CVSS vector

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected versions

Version	Fixed in
– <10.0.14393.9612	10.0.14393.9612
– <10.0.17763.9376	10.0.17763.9376
– <10.0.20348.5761	10.0.20348.5761
– <10.0.26100.33650	10.0.26100.33650

Weakness

CWE-416

Exploit probability (EPSS)

1.1%

Timeline

2026-10-13Publicly disclosed

Sources

NVD