Skip to content

Exploited: 178

LatestCVE-2026-95731 — Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative Access

8.8

CVE-2026-85890Fix available

Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Microsoft Edge Chromium2026-10-29 16:19 UTC1 min readRead in

Summary

Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Remediation

Inventory every Microsoft Edge Chromium deployment, including staging.
Upgrade Microsoft Edge Chromium to 154.0.4258.37.
Confirm the running version after the upgrade.

References

Patchhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85890

CVSS vector

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: Required
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected versions

Version	Fixed in
– <154.0.4258.37	154.0.4258.37

Weakness

CWE-415

Exploit probability (EPSS)

0.6%

Timeline

2026-10-29Publicly disclosed

Sources

NVD