CWE-416: Use After Free vulnerabilities

CVE-2026-69692 is a use-after-free vulnerability in the Windows Audio Service affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.0 and has been officially fixed in several Windows updates.

CVE-2026-69866 is a use-after-free vulnerability in the Windows Device Association Service affecting multiple builds of Windows 10 Version 1809 and later. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7. Microsoft has released official fixes for all affected versions.

CVE-2026-69816 is a use-after-free vulnerability in Windows Accounts Control on Microsoft Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability affects multiple Windows 10 versions prior to specific fixed builds. A patch is available from Microsoft to address this issue.

CVE-2026-69654 is a use-after-free vulnerability in Windows Accounts Control affecting Microsoft Windows 10 Version 1607 and several other builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in multiple Windows 10 versions.

CVE-2026-69834 is a use-after-free vulnerability in the Windows ALPC component affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A fix is available and has been officially released by Microsoft.

CVE-2026-69652 is a use-after-free vulnerability in the Windows Win32K component affecting multiple builds of Windows 10 Version 1607 and later. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in specific Windows 10 builds.

CVE-2026-69791 is a use-after-free vulnerability in the Windows Device Association Service affecting Windows 10 Version 1809 and later builds up to specific patched versions. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score and has been officially fixed by Microsoft in multiple Windows 10 builds.

CVE-2026-69682 is a use-after-free vulnerability in the Windows Host Guardian Service on Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and affects multiple Windows 10 versions prior to specific fixed releases. Microsoft has issued official fixes for all affected versions.

CVE-2026-69817 is a use-after-free vulnerability in the Windows Bluetooth Port Driver affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7. An official fix is available from Microsoft.

CVE-2026-69613 is a use-after-free vulnerability in Windows Image Acquisition on Microsoft Windows 10 Version 1607 and other versions. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score and has been officially fixed in multiple Windows 10 builds.

CVE-2026-69611 is a use-after-free vulnerability in the Virtual Hard Disk (VHD) Miniport Driver of Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity score of 7.0 and has been officially fixed by Microsoft in specific Windows 10 builds.

CVE-2026-69602 is a use-after-free vulnerability in the Windows PrintWorkflowUserSvc component of Microsoft Windows 10 Version 1809 and later versions. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has a high severity rating with a CVSS score of 7.1. Microsoft has issued official fixes for affected versions.

CVE-2026-69597 is a use-after-free vulnerability in the Windows HTTP.sys component affecting Windows 11 version 23H2. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has a high severity rating with a CVSS score of 7.1. Microsoft has released official fixes for affected versions.

CVE-2026-69606 is a use-after-free vulnerability in the Windows Shell component of Microsoft Windows 11 version 23H2. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A fix has been officially released by Microsoft in specific Windows 11 builds.

CVE-2026-69600 is a use-after-free vulnerability in the Microsoft Windows Search Component affecting Windows 10 Version 1607 and other specified versions. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in multiple Windows 10 builds.

CVE-2026-69567 is a use-after-free vulnerability in the Windows NTFS component affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7. An official fix is available and has been released in specific Windows 10 builds.

CVE-2026-69581 is a use-after-free vulnerability in the Windows Device Association Service affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7. An official fix is available and has been released for all affected versions.

CVE-2026-69546 is a high-severity use-after-free vulnerability in Active Directory Domain Services on Microsoft Windows 10 Version 1607 and related builds. It allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official patches to address this issue.

CVE-2026-69536 is a high-severity use-after-free vulnerability in Windows Remote Desktop Services affecting Windows 11 version 23H2. It allows an authorized attacker with low privileges to execute code remotely over a network. The vulnerability has been officially fixed by Microsoft in specific Windows 11 builds.

CVE-2026-69599 is a use-after-free vulnerability in Windows Remote Desktop Services affecting Windows 11 version 23H2. It allows an authorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 7.5 and has been officially fixed by Microsoft in specific patched versions.