CWE-416: Use After Free vulnerabilities

CVE-2026-83780 is a critical use-after-free vulnerability in the Windows CCFFilter Driver affecting Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to execute code remotely over a network without user interaction or privileges. Microsoft has issued official fixes for affected versions to address this issue.

CVE-2026-83761 is a use-after-free vulnerability in the Windows Win32 Kernel Subsystem affecting Windows 10 Version 1809 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in multiple Windows 10 builds.

CVE-2026-83749 is a use-after-free vulnerability in the Windows Overlay Filter component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A fix is available and has been officially released by Microsoft.

CVE-2026-83740 is a use-after-free vulnerability in Windows Hello on Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges by exploiting memory handling errors. The vulnerability affects multiple Windows 10 versions prior to specific fixed releases. Microsoft has issued official patches to address this issue.

CVE-2026-83738 is a use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A security update addressing this issue has been officially released by Microsoft.

CVE-2026-83726 is a use-after-free vulnerability in the Windows DWM Core Library affecting multiple builds of Windows 10 Version 1607 and later. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. Official patches have been released by Microsoft to address this issue.

CVE-2026-83722 is a use-after-free vulnerability in the Microsoft Local Security Authority Server (lsasrv) component of Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A fix is officially available from Microsoft.

CVE-2026-83707 is a use-after-free vulnerability in Windows Event Tracing on Microsoft Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges by exploiting improper memory handling. The vulnerability has been assigned a high severity rating with a CVSS score of 7. An official fix is available and has been released in multiple Windows 10 builds.

CVE-2026-83706 is a use-after-free vulnerability in the Windows NTFS component of Microsoft Windows 11 Version 24H2. It allows an authorized local attacker with high privileges to elevate their privileges further. The vulnerability affects specific builds prior to fixed versions released by Microsoft. A patch is available and has been officially released to address this issue.

CVE-2026-83700 is a use-after-free vulnerability in the Windows Now Playing Session Manager component of Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.

CVE-2026-83690 is a use-after-free vulnerability in the Windows Kernel affecting Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Official patches have been released by Microsoft to address this issue.

CVE-2026-83687 is a use-after-free vulnerability in Windows Connected User Experiences and Telemetry affecting Windows 11 version 23H2. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score and has official fixes available in multiple Windows 11 builds.

CVE-2026-83675 is a use-after-free vulnerability in the Windows Kernel of Microsoft Windows 11 Version 24H2. It allows an authorized local attacker to elevate privileges. The vulnerability affects multiple builds of Windows 11 24H2 prior to specific fixed versions. A high-severity fix is officially available from Microsoft.

CVE-2026-83644 is a use-after-free vulnerability in the Windows Audio Service on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges by exploiting improper memory handling. The vulnerability has been assigned a high severity rating with a CVSS score of 7. An official fix is available and has been released in multiple Windows 10 builds.

CVE-2026-83584 is a use-after-free vulnerability in the Windows Smart Card component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A fix has been officially released by Microsoft for all affected versions.

CVE-2026-83575 is a use-after-free vulnerability in the Microsoft Windows Search Component affecting Windows 10 Version 1607 and other versions. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed by Microsoft in multiple Windows 10 builds.

CVE-2026-69743 is a use-after-free vulnerability in the Windows Program Compatibility Assistant Service affecting Windows 11 version 23H2. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating and has an official fix available from Microsoft.

CVE-2026-72969 is a use-after-free vulnerability in the Windows Program Compatibility Assistant Service affecting Windows 11 version 23H2. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A fix is available and has been officially released by Microsoft.

CVE-2026-69830 is a race condition vulnerability in the Windows DHCP Server component affecting multiple versions of Microsoft Windows including Windows 10 Version 1607. It allows an unauthorized attacker to execute code remotely over a network due to improper synchronization when accessing shared resources. The vulnerability has been assigned a high severity with a CVSS score of 8.1. Official patches have been released to address this issue.

CVE-2026-69387 is a use-after-free vulnerability in Windows Error Reporting affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score and has been officially fixed in several Windows 10 updates.