Description
Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.
Published: 2026-10-13
Score: 9.8 Critical
EPSS: 1.1% Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

A use‑after‑free flaw exists in the Windows CCFFilter driver, allowing an attacker with network access to execute arbitrary code with elevated privileges. This vulnerability can compromise confidentiality, integrity, and availability of affected systems, as code execution may lead to full system takeover.

Affected Systems

Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows Server 2016 (including Server Core), Microsoft Windows Server 2019 (including Server Core), Microsoft Windows Server 2022, and Microsoft Windows Server 2025 (including Server Core).

Risk and Exploitability

The CVSS score is 9.8, indicating critical severity, and the vulnerability is not currently listed in CISA KEV. No EPSS score is available. Based on the description, the likely attack vector is remote network access; an adversary must reach the target machine over the network to trigger the use‑after‑free and execute code at the driver level.

Generated by OpenCVE AI on October 17, 2026 at 01:17 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the Microsoft security update for CVE-2026-83780 from Windows Update or the Microsoft Security Update Guide.
  • If the patch cannot be applied immediately, isolate the affected systems from external networks using firewall rules or network segmentation to block remote exploitation attempts.
  • Enable Windows Defender Exploit Guard or similar policy controls to block or monitor the CCFFilter driver until the vulnerability is patched.

Generated by OpenCVE AI on October 17, 2026 at 01:17 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 02 Nov 2026 13:15:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*

Sun, 18 Oct 2026 09:15:00 +0000

Type Values Removed Values Added
First Time appeared Microsoft windows Server 2016 (server Core Installation)
Microsoft windows Server 2019 (server Core Installation)
Microsoft windows Server 2025 (server Core Installation)
Vendors & Products Microsoft windows Server 2016 (server Core Installation)
Microsoft windows Server 2019 (server Core Installation)
Microsoft windows Server 2025 (server Core Installation)

Tue, 13 Oct 2026 22:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 13 Oct 2026 19:15:00 +0000

Type Values Removed Values Added
Description Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.
Title Windows CCFFilter Driver Remote Code Execution Vulnerability
First Time appeared Microsoft
Microsoft windows 10 1607
Microsoft windows 10 1809
Microsoft windows Server 2016
Microsoft windows Server 2019
Microsoft windows Server 2022
Microsoft windows Server 2025
Weaknesses CWE-416
CPEs cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*
Vendors & Products Microsoft
Microsoft windows 10 1607
Microsoft windows 10 1809
Microsoft windows Server 2016
Microsoft windows Server 2019
Microsoft windows Server 2022
Microsoft windows Server 2025
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C'}

Subscriptions

Microsoft Windows 10 1607 Windows 10 1809 Windows Server 2016 Windows Server 2016 (server Core Installation) Windows Server 2019 Windows Server 2019 (server Core Installation) Windows Server 2022 Windows Server 2025 Windows Server 2025 (server Core Installation)
cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2026-10-31T18:03:13.867Z

Reserved: 2026-08-31T23:02:37.948Z

Link: CVE-2026-83780

cve-icon Vulnrichment

Updated: 2026-10-13T20:28:37.563Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-13T19:20:26.917

Modified: 2026-11-02T12:59:24.673

Link: CVE-2026-83780

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-18T09:00:06Z

Weaknesses