CWE-416: Use After Free vulnerabilities

CVE-2026-83914 is a use-after-free vulnerability in Microsoft XML on Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official fixes addressing this issue. The CVSS v3.1 base score is 8.1, indicating high severity with high impact on confidentiality, integrity, and availability.

CVE-2026-85841 is a use-after-free vulnerability in the Windows DHCP Server component affecting multiple Windows 10 versions including Version 1607. This flaw allows an authorized attacker to execute code remotely over a network. The vulnerability is addressed by official Microsoft patches.

CVE-2026-83912 is a use-after-free vulnerability in Windows Direct Composition affecting Microsoft Windows 10 Version 1607 and other specified versions. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Official fixes have been released for all affected versions.

CVE-2026-83886 is a use-after-free vulnerability in the Windows Update Orchestrator Service on Microsoft Windows 11 version 23H2. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in multiple Windows 11 builds.

CVE-2026-83769 is a use-after-free vulnerability in OpenSSH for Windows on Microsoft Windows 10 Version 1809 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official fixes for all affected versions.

CVE-2026-83741 is a use-after-free vulnerability in Internet Explorer on Microsoft Windows 10 Version 1809 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score and has been officially fixed in multiple Windows 10 builds.

CVE-2026-70243 is a use-after-free vulnerability in the Windows Kernel affecting Microsoft Windows 11 version 23H2. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and is addressed by official patches released by Microsoft.

CVE-2026-70241 is a use-after-free vulnerability in the Windows Kerberos component affecting multiple versions of Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score and has been officially fixed in multiple Windows 10 builds.

CVE-2026-70151 is a use-after-free vulnerability in Windows Direct Composition affecting Windows 10 Version 21H2 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in multiple Windows 10 builds.

CVE-2026-70086 is a use-after-free vulnerability in the Microsoft Windows Search Component affecting Windows 10 Version 1809 and later builds. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score and has been officially fixed in multiple Windows 10 builds.

CVE-2026-83879 is a race condition vulnerability in the Windows Overlay Filter component of Microsoft Windows 10 Version 1607 and related builds. It allows a local authorized attacker to elevate privileges due to improper synchronization during concurrent execution using a shared resource. The vulnerability affects multiple Windows 10 versions prior to specific fixed releases. Microsoft has issued official fixes for the affected versions.

CVE-2026-83901 is a use-after-free vulnerability in the Windows Win32 Kernel Subsystem affecting Windows 10 Version 1809 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.0 and has been officially fixed in multiple Windows 10 builds.

CVE-2026-83866 is a use-after-free vulnerability in the Windows Win32K component affecting multiple builds of Windows 10 Version 1607 and later updates. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity score of 7.0 CVSS v3.1. Microsoft has released official fixes for all affected versions.

CVE-2026-83876 is a use-after-free vulnerability in the Windows Shell component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for multiple affected versions to address this issue.

CVE-2026-83862 is a use-after-free vulnerability in the Windows Network Load Balancing component affecting multiple versions of Microsoft Windows 10 and related Windows versions. This flaw allows an unauthorized attacker on an adjacent network to execute arbitrary code. The vulnerability has a high severity score of 8.8 and has been officially fixed in specific Windows updates.

CVE-2026-83853 is a use-after-free vulnerability in Windows Hello on Microsoft Windows 10 Version 21H2 that allows a local authorized attacker to elevate privileges. The flaw affects multiple builds of Windows 10 21H2 and related versions prior to specific fixed releases. Microsoft has issued official fixes for all affected versions.

CVE-2026-83852 is a use-after-free vulnerability in the Windows Bind Filter Driver affecting Windows 11 Version 24H2. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score and has been officially fixed by Microsoft in specific versions.

CVE-2026-83846 is a use-after-free vulnerability in the Connected Devices Platform Service (Cdpsvc) on Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score and is addressed by official patches from Microsoft.

CVE-2026-83834 is a use-after-free vulnerability in Windows Kernel-Mode Drivers affecting multiple builds of Microsoft Windows 10 Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7. An official fix is available in specific updated Windows 10 builds.

CVE-2026-83796 is a use-after-free vulnerability in the Windows Kernel affecting Microsoft Windows 11 version 23H2. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Official fixes are available in specific Windows 11 builds.