CWE-416: Use After Free vulnerabilities

CVE-2026-69498 is a use-after-free vulnerability in the Windows Win32K component affecting Windows 10 Version 1809 and later builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity with a CVSS score of 7. A patch addressing this issue is officially available from Microsoft.

CVE-2026-69488 is a use-after-free vulnerability in the Windows Device Association Service affecting Windows 10 Version 1607 and related builds. An authorized local attacker could exploit this flaw to elevate privileges. The vulnerability has a high severity score and has been officially fixed by Microsoft in multiple Windows 10 builds.

CVE-2026-69474 is a use-after-free vulnerability in the Windows Overlay Filter component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has a medium severity score and has been officially fixed by Microsoft in multiple Windows 10 versions.

CVE-2026-69460 is a use-after-free vulnerability in Windows Modern Device Management (MDM) affecting multiple builds of Windows 10 Version 1809 and later. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has a high severity rating with a CVSS score of 7.1. Microsoft has released official patches that address this issue in specific fixed versions.

CVE-2026-69430 is a use-after-free vulnerability in the Windows Embedded Mode Service on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability affects multiple Windows 10 versions prior to specific fixed builds. Microsoft has released official fixes for all affected versions.

CVE-2026-69422 is a use-after-free vulnerability in the Windows USB Video Driver affecting Windows 11 Version 24H2. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed by Microsoft in specific builds.

CVE-2026-69410 is a use-after-free vulnerability in the Windows Win32K component affecting Windows 10 Version 1607 and related versions. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score and has been officially fixed by Microsoft in specific updates.

CVE-2026-69396 is a use-after-free vulnerability in the Windows Network Driver Interface Specification (NDIS) component affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has a high severity rating and has been officially fixed in specific Windows 10 builds.

CVE-2026-69388 is a use-after-free vulnerability in the Windows Bluetooth Service affecting multiple builds of Windows 10 Version 1809 and later. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7. Microsoft has released official fixes for all affected versions.

CVE-2026-69385 is a race condition vulnerability in the Windows TCP/IP stack affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows a locally authorized attacker to elevate privileges due to improper synchronization during concurrent execution of shared resources. The vulnerability has a high severity rating and has been officially fixed in specific Windows 10 builds.

CVE-2026-69364 is a race condition vulnerability in the Windows Print Spooler components affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized attacker to elevate privileges over a network by exploiting improper synchronization during concurrent execution using shared resources. The vulnerability has a high severity rating and has been officially fixed in specific Windows 10 builds.

CVE-2026-69357 is a use-after-free vulnerability in the Windows Network Driver Interface Specification (NDIS) component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has a high severity score of 7.1 and has been officially fixed in several Windows 10 builds.

CVE-2026-69335 is a use-after-free vulnerability in the Windows Win32K component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A fix is officially available from Microsoft in specific updated versions.

CVE-2026-69331 is a use-after-free vulnerability in the Windows Remote Access Connection Manager component affecting multiple builds of Windows 10 Version 1607 and related versions. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability has a high severity score and has been officially fixed in specific Windows updates.

CVE-2026-69319 is a race condition vulnerability in the Windows USB Video Driver affecting multiple versions of Microsoft Windows 10, including version 1607 and later builds. This flaw allows a locally authorized attacker to elevate privileges due to improper synchronization when accessing shared resources. The vulnerability has a high severity rating and has been officially fixed in specific Windows 10 builds.

CVE-2026-69300 is a use-after-free vulnerability in the Windows Push Notifications component of Microsoft Windows 11 version 23H2. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7.0. Microsoft has released official fixes for all affected versions.

CVE-2026-69314 is a use-after-free vulnerability in the Windows Device Association Broker service affecting multiple builds of Windows 10 Version 1607 and later. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has a high severity rating with a CVSS score of 7.1. Microsoft has released official fixes for all affected versions.

CVE-2026-69299 is a use-after-free vulnerability in Microsoft COM on Windows 10 Version 21H2 that allows an authorized local attacker to elevate privileges. The flaw affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official patches to address this issue. No known exploits are reported in the wild.

CVE-2026-69275 is a use-after-free vulnerability in the Kernel Streaming WOW Thunk Service Driver on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score and has official patches available from Microsoft.

CVE-2026-69305 is a use-after-free vulnerability in the Microsoft Windows Search Component affecting multiple versions of Windows 10, including version 1607. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has a high severity score of 7.1 and has been officially fixed in several Windows 10 updates.