CWE-416: Use After Free vulnerabilities

CVE-2026-72934 is a use-after-free vulnerability in the Windows Program Compatibility Assistant Service affecting Windows 11 version 23H2. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed by Microsoft in specific Windows 11 builds.

CVE-2026-72955 is a use-after-free vulnerability in the Windows Application Compatibility Cache component of Microsoft Windows 11 version 23H2. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A fix has been officially released by Microsoft in specific Windows 11 builds.

CVE-2026-69883 is a critical use-after-free vulnerability in the Windows iSCSI component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network without user interaction. Microsoft has released official patches that address this vulnerability in specific fixed versions.

CVE-2026-70274 is a use-after-free vulnerability in the Windows Bind Filter Driver on Microsoft Windows 11 version 23H2. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed by Microsoft in specific updated versions of Windows 11.

CVE-2026-70273 is a use-after-free vulnerability in the Windows Win32 Kernel Subsystem affecting Windows 11 Version 24H2. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.0 and has been officially fixed by Microsoft in specific builds of Windows 11 24H2.

CVE-2026-70272 is a use-after-free vulnerability in the Windows Installer component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A fix has been officially released by Microsoft in multiple Windows 10 builds.

CVE-2026-70271 is a use-after-free vulnerability in Microsoft Office for Android that affects certain versions prior to specified fixed releases. This flaw exists in the Windows Win32 Kernel Subsystem and allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed by Microsoft in multiple versions.

CVE-2026-70252 is a use-after-free vulnerability in the Virtual Hard Disk (VHD) Miniport Driver of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A fix has been officially released by Microsoft for all affected versions.

CVE-2026-70253 is a use-after-free vulnerability in the Windows Win32 Kernel Subsystem affecting Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A patch is available and has been officially released by Microsoft for all affected versions.

CVE-2026-70249 is a use-after-free vulnerability in the Windows Win32 Kernel Subsystem affecting multiple builds of Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in specific Windows 10 builds.

CVE-2026-70223 is a use-after-free vulnerability in the Windows Console Driver affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score and has been officially fixed in multiple Windows 10 builds.

CVE-2026-70195 is a use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to disclose information. The vulnerability has been assigned a medium severity with a CVSS score of 4.7. Microsoft has released official fixes for all affected versions.

CVE-2026-70168 is a use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score and has been officially fixed in specific Windows updates.

CVE-2026-70169 is a race condition vulnerability in the Windows Connected Devices Platform Service on Windows 10 Version 1809 and later builds. It allows an authorized local attacker to elevate privileges due to improper synchronization during concurrent execution using a shared resource. The vulnerability has been assigned a high severity rating with a CVSS score of 7. An official fix is available for affected versions.

CVE-2026-70198 is a use-after-free vulnerability in Windows Push Notifications affecting Microsoft Windows 10 Version 1809 and later builds up to specified fixed versions. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in multiple Windows 10 builds.

CVE-2026-70156 is a use-after-free vulnerability in the Microsoft Windows Search Component affecting Windows 10 Version 1607 and other specified versions. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score and has been officially fixed by Microsoft in multiple updates.

CVE-2026-70176 is a use-after-free vulnerability in the Windows Win32 Kernel Subsystem affecting multiple builds of Windows 10 Version 1607 and later. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in specific Windows 10 builds.

CVE-2026-70150 is a use-after-free vulnerability in the Microsoft Windows Search Component affecting Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in multiple Windows 10 builds.

CVE-2026-70136 is a use-after-free vulnerability in the Microsoft Windows Search Component affecting Windows 10 Version 1607 and other specified versions. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7.0. Official patches have been released by Microsoft to address this issue.

CVE-2026-70118 is a use-after-free vulnerability in the Windows Audio Service of Microsoft Windows 11 Version 24H2. It allows an authorized local attacker to elevate privileges. The vulnerability affects multiple builds of Windows 11 24H2 prior to specific fixed versions. A patch is available from Microsoft to address this issue.