CWE-416: Use After Free vulnerabilities

CVE-2026-78450 is a use-after-free vulnerability in the Reliable Multicast Transport Driver (RMCAST) component of Microsoft Windows 10 Version 1809. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability affects specific builds of Windows 10 Version 1809 prior to the fixed versions 10.0.17763.9245, 10.0.20348.5622, and 10.0.26100.33438. Microsoft has released official fixes addressing this issue.

CVE-2026-78449 is a use-after-free vulnerability in the Reliable Multicast Transport Driver (RMCAST) component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.1. Microsoft has released official fixes for all affected versions.

CVE-2026-78446 is a use-after-free vulnerability in the Windows Distributed File System (DFS) component affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized attacker to execute code remotely over a network. The vulnerability has been assigned a high severity rating with a CVSS score of 7.5. Official patches have been released by Microsoft to address this issue.

CVE-2026-78445 is a critical use-after-free vulnerability in the Windows Services for NFS ONCRPC XDR Driver affecting Microsoft Windows Server 2012 and related versions. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability. Official patches have been released to address this issue.

CVE-2026-77905 is a use-after-free vulnerability in Windows Management Instrumentation on Microsoft Windows 10 Version 1607 and other affected versions. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score and has been officially fixed in multiple Windows 10 builds.

CVE-2026-77485 is a use-after-free vulnerability in Microsoft SQL Server 2017 (CU 31) that allows an authorized local attacker to elevate privileges. The flaw affects multiple versions of SQL Server 2017, 2019, 2022, and 2024 prior to specific fixed releases. Microsoft has issued official fixes for this vulnerability.

CVE-2026-73010 is a critical use-after-free vulnerability in the Windows Failover Cluster component of Microsoft Windows 10 Version 1809. This flaw allows an unauthorized attacker to execute code remotely over a network without user interaction. The vulnerability affects multiple builds of Windows 10 Version 1809 and has been officially fixed in specific updated versions.

CVE-2026-73009 is a critical use-after-free vulnerability in the Windows Secure Socket Tunneling Protocol (SSTP) affecting multiple versions of Microsoft Windows 10 and some earlier Windows versions. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. Microsoft has released official patches to address this vulnerability.

CVE-2026-73005 is a use-after-free vulnerability in Windows Authentication Methods affecting Windows 10 Version 1607 and later builds up to specific patched versions. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed by Microsoft in multiple updates.

CVE-2026-73022 is a use-after-free vulnerability in Windows Modern Device Management (MDM) on Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score and has been officially fixed by Microsoft in multiple Windows 10 builds.

CVE-2026-73003 is a use-after-free vulnerability in Windows Modern Device Management (MDM) affecting multiple builds of Microsoft Windows 10, including version 1809 and later. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A fix is available in specific updated Windows 10 builds.

CVE-2026-72987 is a use-after-free vulnerability in the Windows DNS component affecting multiple versions of Microsoft Windows, including Windows 10 Version 1607. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score and has been officially fixed in specific Windows updates.

CVE-2026-70570 is a high-severity use-after-free vulnerability in the Windows Routing and Remote Access Service (RRAS) affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows remote code execution, enabling an attacker to gain unauthorized access to the victim's machine. Microsoft has released official fixes for all affected versions.

CVE-2026-69441 is a race condition vulnerability in the Windows Installer component of Microsoft Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges due to improper synchronization when accessing shared resources concurrently. The flaw affects multiple Windows 10 builds and some earlier versions, but fixed versions have been released by Microsoft.

CVE-2026-69632 is a high-severity use-after-free vulnerability in Microsoft 365 Apps for Enterprise that allows an unauthorized attacker to execute code remotely. The flaw exists in Microsoft Office components and can be exploited over a network, requiring only user interaction. Microsoft has released official fixes for multiple affected versions to address this issue.

CVE-2026-69607 is a use-after-free vulnerability in Windows Deployment Services affecting multiple versions of Microsoft Windows including Windows 10 Version 1607. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity rating with a CVSS score of 7.5. Microsoft has issued official fixes for all affected versions.

CVE-2026-69575 is a use-after-free vulnerability in the Windows Storage Spaces Controller component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A fix has been officially released by Microsoft for all affected versions.

CVE-2026-69560 is a use-after-free vulnerability in the Windows Work Folder Service affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score and has been officially fixed in specific Windows 10 builds.

CVE-2026-69397 is a use-after-free vulnerability in OpenSSH for Windows on Microsoft Windows 10 Version 1809 and related builds. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple Windows 10 versions prior to specific fixed releases. Microsoft has issued official fixes for all affected versions.

CVE-2026-69392 is a use-after-free vulnerability in the Windows Shell component of Microsoft Windows 11 version 23H2. It allows an authorized local attacker to elevate privileges. The flaw is addressed by official patches released by Microsoft.