CWE-416: Use After Free vulnerabilities

Adobe Acrobat contains a Use After Free vulnerability (CWE-416) that could allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to and including 26.002.21900 and 24.001.30383. The CVSS 3.1 base score is 7.8, indicating a high severity level.

Adobe Acrobat contains a Use After Free vulnerability (CWE-416) that could allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 26.002.21900 and 24.001.30383. The CVSS 3.1 base score is 7.8, indicating high severity.

Adobe Acrobat contains a Use After Free vulnerability (CWE-416) that could allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 26.002.21900 and 24.001.30383. The CVSS v3.1 base score is 7.8, indicating high severity.

Adobe Acrobat contains a Use After Free vulnerability that may allow an attacker to disclose sensitive memory information. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects certain versions of Adobe Acrobat up to 26.002.21900 and 24.001.30383. The CVSS score is 5.5, indicating a medium severity level.

CVE-2026-81986 is a Use After Free vulnerability in Adobe Acrobat Reader that can lead to arbitrary code execution with the privileges of the current user. Exploitation requires user interaction by opening a malicious file. The vulnerability affects versions up to 26.002.21900 and 24.001.30383. It has a high severity rating with a CVSS score of 7.8.

Adobe Acrobat contains a Use After Free vulnerability (CWE-416) that could allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 26.002.21900 and 24.001.30383. The CVSS 3.1 base score is 7.8, indicating a high severity issue.

Adobe Acrobat contains a Use After Free vulnerability (CWE-416) that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 26.002.21900 and 24.001.30383. The CVSS score is 7.8, indicating high severity.

Adobe Acrobat contains a Use After Free vulnerability (CWE-416) that could allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 26.002.21900 and 24.001.30383. The CVSS 3.1 base score is 7.8, indicating a high severity issue.

CVE-2026-83997 is a use-after-free vulnerability in Windows Message Queuing on Microsoft Windows 10 Version 21H2. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official patches to address this issue.

CVE-2026-83968 is a use-after-free vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Microsoft has issued official fixes for all affected versions.

CVE-2026-72965 is a use-after-free vulnerability in the Windows WebClient Service affecting multiple versions of Microsoft Windows 10, including version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.

CVE-2026-69530 is a use-after-free vulnerability in the Reliable Multicast Transport Driver (RMCAST) of Microsoft Windows 10 Version 1809. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects specific builds of Windows 10 Version 1809 and has been assigned a high severity rating with a CVSS score of 8.1. Microsoft has released official fixes for the affected versions.

CVE-2026-83940 is a use-after-free vulnerability in the Windows Device Association Service affecting multiple builds of Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in several Windows 10 builds.

CVE-2026-81954 is a use-after-free vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code locally. The vulnerability affects multiple versions of Microsoft 365 Apps for Enterprise prior to fixed releases. A high-severity CVSS score of 7.8 has been assigned. Microsoft has issued official fixes for the affected versions.

CVE-2026-80081 is a use-after-free vulnerability in Microsoft Office PowerPoint within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects versions from 16.0.1 up to but not including 16.0.20326.20138. Microsoft has released an official fix in version 16.0.20326.20138. The vulnerability has a high severity rating with a CVSS score of 8.8. There are no known exploits in the wild at this time.

CVE-2026-78525 is a use-after-free vulnerability in Microsoft Office Outlook within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Official patches have been released to address this issue in multiple versions of the affected software.

CVE-2026-78514 is a use-after-free vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to specific fixed releases. An official fix is available from Microsoft.

CVE-2026-78507 is a high-severity use-after-free vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. It allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to specific fixed releases. An official fix is available from Microsoft.

CVE-2026-69595 is a critical use-after-free vulnerability in the Windows Services for NFS ONCRPC XDR Driver affecting Microsoft Windows Server 2012 and related versions. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability. Official patches have been released by Microsoft to address this issue.

CVE-2026-78457 is a use-after-free vulnerability in the Windows Security App on Microsoft Windows 11 Version 24H2. It allows an authorized local attacker to elevate privileges. The vulnerability affects multiple builds of Windows 11 24H2 prior to specific fixed versions. Microsoft has released official patches to address this issue.