CWE-416: Use After Free vulnerabilities

CVE-2026-71347 is a race condition vulnerability in the Windows Security Center component of Microsoft Windows 10 Version 1607 and later builds. It allows an authorized local attacker to elevate privileges due to improper synchronization when accessing shared resources. The vulnerability has been assigned a CVSS 3.1 base score of 6.4 (medium severity). Microsoft has released official patches that fix this issue in multiple Windows 10 builds.

CVE-2026-85868 is a use-after-free vulnerability in the Windows Common Log File System Driver affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A fix is officially available from Microsoft.

CVE-2026-85863 is a use-after-free vulnerability in the Windows Clipboard User Service affecting multiple builds of Windows 10 Version 1607 and later. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in specific Windows 10 builds.

CVE-2026-85861 is a use-after-free vulnerability in the Windows Clipboard User Service affecting multiple builds of Windows 10 Version 1607 and later. An authorized local attacker could exploit this flaw to elevate privileges. Microsoft has released official fixes for all affected versions.

CVE-2026-85860 is a use-after-free vulnerability in the Windows Message Queuing Queue Manager component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Official patches have been released to address this issue in all affected versions.

CVE-2026-85855 is a use-after-free vulnerability in the Windows DWM Core Library affecting Windows 11 Version 24H2. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7. An official fix is available in specific Windows 11 builds.

CVE-2026-85854 is a use-after-free vulnerability in the Windows DWM Core Library affecting Windows 10 Version 1809 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7. An official fix is available in multiple updated Windows 10 builds.

CVE-2026-85851 is a use-after-free vulnerability in the Windows SmartScreen component of Microsoft Windows 11 version 23H2. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Microsoft has released official patches that address this issue in multiple Windows 11 builds.

CVE-2026-85846 is a use-after-free vulnerability in the Windows Web Account Manager component of Microsoft Windows 10 Version 1809 and later builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity score of 7.0 and has been officially fixed in multiple Windows 10 builds. No known exploits are reported in the wild at this time.

CVE-2026-85836 is a use-after-free vulnerability in the Windows Kernel affecting Windows 11 Version 24H2. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in several Windows 11 builds.

CVE-2026-85833 is a use-after-free vulnerability in Windows Modern Device Management (MDM) affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.

CVE-2026-85824 is a use-after-free vulnerability in the Windows Composite Image File System affecting Windows 10 Version 21H2 and related builds. An authorized local attacker can exploit this flaw to elevate privileges on the affected system. The vulnerability has been assigned a high severity with a CVSS score of 7. Microsoft has released official fixes for all affected versions.

CVE-2026-85823 is a use-after-free vulnerability in the Windows Composite Image File System affecting Windows 11 Version 24H2. It allows an authorized local attacker to elevate privileges. The issue has been assigned a high severity score and has been officially fixed by Microsoft in specific Windows builds.

CVE-2026-85811 is a use-after-free vulnerability in the Network Policy Server (NPS) component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an unauthorized attacker on an adjacent network to execute arbitrary code. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. A high-severity CVSS 3.1 score of 7.5 has been assigned. Official patches have been released by Microsoft to address this issue.

CVE-2026-85810 is a use-after-free vulnerability in the Windows Telephony Server component of Microsoft Windows 10 Version 1607 and other versions. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A fix for this issue is officially available from Microsoft.

CVE-2026-85804 is a use-after-free vulnerability in the Windows Win32 Kernel Subsystem affecting Windows 11 version 23H2. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and impacts confidentiality, integrity, and availability. Microsoft has released official fixes for affected versions.

CVE-2026-85803 is a use-after-free vulnerability in the Windows Camera Frame Server Monitor component of Microsoft Windows 11 version 23H2. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in multiple Windows 11 builds.

CVE-2026-85802 is a use-after-free vulnerability in the Windows Win32 Kernel Subsystem affecting Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A patch addressing this issue is officially available from Microsoft.

CVE-2026-85799 is a use-after-free vulnerability in the Network Policy Server (NPS) component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability affects multiple Windows 10 builds and earlier versions, with fixes released in specific updates. The vulnerability has a high severity rating with a CVSS score of 8.1.

CVE-2026-85795 is a use-after-free vulnerability in the Windows Text Services Framework affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in specific Windows updates.