{"id":"CVE-2026-95962","published":"2026-11-10T19:21:51.060","lastModified":"2026-11-10T22:21:16.110","description":"Use after free in Windows Virtual Filtering Platform (VFP) allows an unauthorized attacker to execute code over a network.","cvssScore":9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-416"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95962","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A use-after-free vulnerability in Windows Virtual Filtering Platform (VFP) allows remote code execution by enabling an attacker to free memory and then reuse it before it is properly deallocated. This flaw is critical due to its potential for full system compromise over the network.","exploitability":"Exploitation requires high skill and favorable conditions due to the CVSS attack complexity being high (AC:H), though no authentication or user interaction is required.","blast_radius":"Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code with elevated privileges on affected Windows systems, potentially leading to full system compromise across the network.","remediation":"No fixed version or patch level is specified in the published description; apply Microsoft security advisories as they become available, and temporarily disable non-essential VFP functionality or restrict network access to VFP endpoints pending remediation.","detection":"No reliable host or network indicator is derivable from the published description.","tags":[],"model":"garnet-coder","analyzedAt":"2026-11-11T09:59:30.977Z"}}