CWE-416: Use After Free vulnerabilities

CVE-2026-70115 is a use-after-free vulnerability in the Microsoft Windows Search Component affecting Windows 11 Version 24H2. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score and has been officially fixed by Microsoft in specific Windows 11 builds.

CVE-2026-70140 is a use-after-free vulnerability in the Windows Audio Service on Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.0 and has been officially fixed in multiple Windows 10 versions.

CVE-2026-70127 is a use-after-free vulnerability in the DNS Server component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.1 and affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official patches to address this issue.

CVE-2026-70077 is a use-after-free vulnerability in the Windows Kernel affecting multiple builds of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an authorized local attacker to disclose sensitive information. The vulnerability has been assigned a medium severity with a CVSS score of 4.7. Microsoft has released official fixes for all affected versions.

CVE-2026-70076 is a use-after-free vulnerability in the Windows Win32 Kernel Subsystem affecting Windows 11 Version 24H2. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.0 and has been officially fixed by Microsoft in specific Windows 11 builds.

CVE-2026-70056 is a use-after-free vulnerability in the Windows Update Service on Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7. An official fix is available in multiple updated Windows 10 builds.

CVE-2026-70026 is a use-after-free vulnerability in the Windows Secure Kernel Mode of Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability affects multiple Windows 10 versions prior to specific fixed builds. Microsoft has released official patches to address this issue.

CVE-2026-70025 is a use-after-free vulnerability in the Windows Netlogon component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized attacker to cause a denial of service over a network. The vulnerability has a medium severity rating with a CVSS score of 5.3. Official patches have been released to address this issue.

CVE-2026-70021 is a use-after-free vulnerability in Windows Direct Composition affecting Windows 11 Version 24H2. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score and has been officially fixed in multiple Windows builds.

CVE-2026-70014 is a use-after-free vulnerability in Windows Cryptographic Services affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized attacker to execute code remotely over a network. The vulnerability has a high severity rating with a CVSS score of 7.5. Microsoft has released official fixes for all affected versions.

CVE-2026-69976 is a use-after-free vulnerability in the Remote Desktop Client component of Microsoft Windows 10 Version 1607 and other specified versions. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity rating with a CVSS score of 7.5. Microsoft has released official fixes for all affected versions.

CVE-2026-69964 is a use-after-free vulnerability in the Microsoft Streaming Service on Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges. The flaw has been assigned a high severity rating with a CVSS score of 7. A patch is available and has been officially released by Microsoft.

CVE-2026-69913 is a use-after-free vulnerability in the Windows TCP/IP stack affecting multiple versions of Microsoft Windows 10, including Version 1607 and later builds. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.1. Microsoft has released official fixes for all affected versions.

CVE-2026-69840 is a use-after-free vulnerability in Windows Certificates on Microsoft Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score and is addressed by official patches from Microsoft.

CVE-2026-69935 is a use-after-free vulnerability in the Windows Storage component of Microsoft Windows 10 Version 1809 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.0. Official patches have been released to address this issue in multiple Windows 10 builds.

CVE-2026-69766 is a use-after-free vulnerability in the Windows Storage component of Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A patch addressing this issue is officially available from Microsoft.

CVE-2026-69763 is a use-after-free vulnerability in the Windows Storage component of Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7. An official fix is available from Microsoft, addressing the issue in multiple Windows 10 builds.

CVE-2026-61931 is a use-after-free vulnerability in the Windows Perception Simulation Service affecting Windows 10 Version 1809 and later builds up to specific patched versions. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability has a high severity rating and has been officially fixed by Microsoft in multiple Windows 10 builds.

CVE-2026-72968 is a use-after-free vulnerability in the Windows Program Compatibility Assistant Service affecting multiple builds of Windows 10 Version 1607 and later. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7. An official fix is available from Microsoft.

CVE-2026-108460 is a use-after-free vulnerability in Windows Message Queuing on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has been assigned a high severity with a CVSS score of 8.1. Microsoft has released official fixes for affected versions.