CWE-416: Use After Free vulnerabilities

CVE-2026-69997 is a use-after-free vulnerability in the Remote Desktop Client component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity rating with a CVSS score of 7.5. Official patches have been released to address this issue in multiple Windows 10 builds.

CVE-2026-69995 is a use-after-free vulnerability in the Remote Desktop Client component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability has a high severity rating with a CVSS score of 7.5. Microsoft has released official patches that address this issue in multiple Windows 10 builds.

CVE-2026-69987 is a use-after-free vulnerability in the Remote Desktop Client component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. A high-severity CVSS 3.1 score of 7.5 has been assigned. Official patches have been released by Microsoft to address this issue.

CVE-2026-69988 is a use-after-free vulnerability in the Remote Desktop Client component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official patches to address this issue.

CVE-2026-69986 is a use-after-free vulnerability in the Remote Desktop Client component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official fixes to address this issue.

CVE-2026-69984 is a use-after-free vulnerability in the Remote Desktop Client component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official fixes addressing this issue.

CVE-2026-69856 is a use-after-free vulnerability in Windows Storage on Microsoft Windows 10 Version 1809 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score and has been officially fixed in multiple Windows 10 versions.

CVE-2026-69931 is a race condition vulnerability in the Windows Storage component of Microsoft Windows 10 Version 1809 and related builds. It allows an authorized local attacker to elevate privileges due to improper synchronization when concurrently accessing shared resources. The vulnerability has a high severity rating and affects multiple Windows 10 versions prior to specific fixed releases. An official fix is available from Microsoft.

CVE-2026-97789 is a use-after-free vulnerability in the Remote Desktop Client component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a high severity rating with a CVSS score of 7.5. Microsoft has released official patches to address this issue in multiple Windows 10 builds.

CVE-2026-97759 is a use-after-free vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has released official fixes in versions 16.114.26101123 and 16.0.17932.21056 to address this issue.

CVE-2026-97771 is a use-after-free vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has released official fixes in multiple versions to address this issue.

CVE-2026-97747 is a use-after-free vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity rating with a CVSS score of 8.8. Microsoft has issued official fixes for affected versions.

CVE-2026-97752 is a use-after-free vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has issued official fixes for multiple affected versions.

CVE-2026-97017 is a use-after-free vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.8 and affects multiple versions of the software prior to specific fixed releases. Microsoft has issued official fixes for this vulnerability.

CVE-2026-96997 is a use-after-free vulnerability in Microsoft Office OneNote within Microsoft 365 Apps for Enterprise. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity with a CVSS score of 7.8. Official patches have been released to address this issue.

CVE-2026-96108 is a use-after-free vulnerability in the Desktop Window Manager component of Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.

CVE-2026-69452 is a use-after-free vulnerability in the Windows Enterprise App Management component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has been assigned a high severity score and has official patches available from Microsoft.

CVE-2026-96319 is a use-after-free vulnerability in the Windows USB Print Driver affecting Windows 10 Version 21H2 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score and has been officially fixed by Microsoft in multiple Windows 10 builds.

CVE-2026-96317 is a use-after-free vulnerability in the Windows Kernel affecting Windows 10 Version 1809 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score and has been officially fixed in multiple Windows 10 builds.

CVE-2026-96309 is a use-after-free vulnerability in the Windows Subsystem for Linux component of Microsoft Windows 10 Version 21H2. This flaw allows an authorized local attacker to elevate privileges. The vulnerability affects multiple builds of Windows 10 Version 21H2 prior to specific fixed versions. Microsoft has released official fixes for all affected versions.