CWE-416: Use After Free vulnerabilities

CVE-2026-69311 is a use-after-free vulnerability in the Windows Audio Service affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in specific Windows 10 builds.

CVE-2026-69287 is a use-after-free vulnerability in Microsoft Windows Remote Desktop Services affecting Windows 10 Version 1607 and other versions. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7. A patch is available and has been officially released by Microsoft.

CVE-2026-72954 is a use-after-free vulnerability in Windows Deployment Services affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized attacker with low privileges to execute code remotely over a network. The vulnerability has been assigned a high severity rating with a CVSS score of 7.5. Official patches have been released to address this issue.

CVE-2026-72936 is a use-after-free vulnerability in the Windows SMB Client component of Microsoft Windows 11 version 23H2. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple builds of Windows 11 23H2 prior to specific fixed versions. Microsoft has released official patches to address this issue.

CVE-2026-72928 is a use-after-free vulnerability in Windows DNS component of Microsoft Windows Server 2025. It allows an authorized attacker with low privileges to execute code remotely over a network. The vulnerability affects Windows Server 2025 versions from 10.0.26100.0 up to but not including 10.0.26100.33438. A high-severity fix has been officially released by Microsoft.

CVE-2026-71342 is a use-after-free vulnerability in the Windows Remote Access Connection Manager component affecting multiple builds of Windows 10, including Version 1607. An authorized local attacker could exploit this flaw to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in specific Windows 10 builds.

CVE-2026-70577 is a use-after-free vulnerability in Windows Modern Device Management (MDM) affecting Windows 10 Version 1809 and later builds up to specific patched versions. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score and has been officially fixed by Microsoft in multiple Windows 10 builds.

CVE-2026-70565 is a use-after-free vulnerability in the Windows AF_UNIX Socket Provider affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in several Windows 10 builds.

CVE-2026-69784 is a use-after-free vulnerability in Windows Hello on Microsoft Windows 10 Version 21H2. It allows an authorized local attacker to elevate privileges. The vulnerability affects multiple builds of Windows 10 21H2 and related versions prior to specific fixed releases. A high-severity fix is available from Microsoft.

CVE-2026-69864 is a use-after-free vulnerability in Windows Hello on Microsoft Windows 10 Version 21H2 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 and affects multiple Windows 10 versions prior to specific fixed builds. Microsoft has released official patches to address this issue.

CVE-2026-69858 is a high-severity use-after-free vulnerability in the Windows DNS component of Microsoft Windows Server 2022. It allows an unauthorized attacker to execute code remotely over a network. The flaw affects specific builds of Windows Server 2022 prior to versions 10.0.20348.5622 and 10.0.26100.33438. An official fix is available from Microsoft.

CVE-2026-69813 is a use-after-free vulnerability in the Windows DNS component affecting multiple versions of Microsoft Windows 10 and some earlier Windows versions. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity rating and has been officially fixed in specific Windows updates.

CVE-2026-69876 is a use-after-free vulnerability in the Windows DHCP Server component affecting multiple versions of Microsoft Windows 10 and related Windows versions. This flaw allows an authorized attacker on an adjacent network to execute arbitrary code. The vulnerability has a high severity rating and has been officially fixed by Microsoft in specific updates.

CVE-2026-69911 is a use-after-free vulnerability in the Microsoft Windows Search Component affecting Windows 10 Version 1607 and other specified builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.0 and has been officially fixed in multiple Windows 10 builds.

CVE-2026-69891 is a use-after-free vulnerability in Windows Media on Microsoft Windows 10 Version 1607 and later versions. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A fix is officially available in multiple updated Windows 10 builds.

CVE-2026-69818 is a use-after-free vulnerability in the Windows Win32K component affecting Windows 11 Version 24H2. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score and has been officially fixed by Microsoft in specific Windows 11 builds.

CVE-2026-69708 is a use-after-free vulnerability in the Windows Web Platform Storage component of Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity score and has been officially fixed by Microsoft in specific Windows 10 builds.

CVE-2026-69761 is a use-after-free vulnerability in the Windows TCP/IP stack affecting Windows 10 Version 1607 and other versions. An authorized attacker can exploit this flaw over a network to elevate privileges. The vulnerability has a high severity rating and has been officially fixed by Microsoft in specific updates.

CVE-2026-69706 is a use-after-free vulnerability in the Windows Win32K component affecting multiple versions of Microsoft Windows 10, including version 1607. An authorized attacker can exploit this flaw over a network to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.1. Official patches have been released to address this issue.

CVE-2026-69814 is a use-after-free vulnerability in Windows Credential Providers affecting Windows 11 version 23H2. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed by Microsoft in specific Windows 11 builds.