CWE-416: Use After Free vulnerabilities

CVE-2026-72983 is a critical use-after-free vulnerability in Windows Internet Connection Sharing (ICS) affecting multiple Windows 10 versions including Version 1607. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network without user interaction. Microsoft has released official fixes for all affected versions.

CVE-2026-72981 is a use-after-free vulnerability in the IP Helper component of Microsoft Windows 10 Version 1607 and other specified versions. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.1 and affects multiple Windows 10 builds prior to their respective fixed versions. Microsoft has released official fixes for all affected versions.

CVE-2026-72979 is a critical use-after-free vulnerability in the Windows DHCP Server component affecting multiple Windows 10 and Windows Server versions. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. Microsoft has released official fixes for all affected versions.

CVE-2026-69797 is a use-after-free vulnerability in Microsoft Office PowerPoint within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.8 and affects multiple versions of Microsoft 365 Apps for Enterprise prior to specific fixed releases. An official fix is available from Microsoft.

CVE-2026-69767 is a use-after-free vulnerability in Microsoft Office PowerPoint within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Multiple affected versions prior to specific fixed releases are identified. An official fix is available from Microsoft, and the vendor manages remediation for this cloud-hosted service.

CVE-2026-69678 is a use-after-free vulnerability in Microsoft Office PowerPoint within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions of Microsoft 365 Apps for Enterprise prior to specific fixed releases. A high-severity CVSS score of 8.8 reflects the critical impact on confidentiality, integrity, and availability. Microsoft has released official patches to address this issue.

CVE-2026-69576 is a use-after-free vulnerability in the Graphic Fonts component of Microsoft Office 365 for Mac. It allows an authorized local attacker to elevate privileges. The flaw affects multiple versions of Office 365 for Mac prior to 16.112.26090911 and 16.0.20430.20000. Microsoft has issued official fixes for the vulnerability.

CVE-2026-68837 is a use-after-free vulnerability in the Windows File History Service affecting multiple builds of Windows 10 Version 1607 and later. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A fix is available and has been officially released by Microsoft.

CVE-2026-68825 is a use-after-free vulnerability in the Windows Bind Filter Driver affecting Microsoft Windows 11 version 23H2. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in multiple Windows 11 builds.

CVE-2026-72963 is a use-after-free vulnerability in the Windows Modern Execution Server component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7. A security update addressing this issue has been officially released by Microsoft.

CVE-2026-72943 is a use-after-free vulnerability in Windows Deployment Services affecting multiple versions of Microsoft Windows, including Windows 10 Version 1607. This flaw allows an authorized attacker to execute code remotely over a network. The vulnerability has a high severity rating with a CVSS score of 7.5. Microsoft has released official fixes for all affected versions.

CVE-2026-72930 is a use-after-free vulnerability in the Windows Secure Socket Tunneling Protocol (SSTP) component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized attacker with local access to execute arbitrary code. The vulnerability has been assigned a high severity rating with a CVSS score of 7. An official fix is available from Microsoft.

CVE-2026-72926 is a use-after-free vulnerability in Windows Internet Connection Sharing (ICS) affecting multiple versions of Microsoft Windows 10. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A fix is available and has been officially released by Microsoft.

CVE-2026-71340 is a use-after-free vulnerability in the Windows File History Service affecting multiple builds of Windows 10 Version 1607 and later. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability has a high severity rating and has been officially fixed by Microsoft in specific Windows 10 builds.

CVE-2026-71332 is a use-after-free vulnerability in the Windows Secure Socket Tunneling Protocol (SSTP) component affecting multiple builds of Windows 10 Version 1607 and later. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7. A fix has been officially released by Microsoft for all affected versions.

CVE-2026-71333 is a use-after-free vulnerability in the Windows Remote Access Connection Manager component affecting multiple builds of Windows 10, including version 1607. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability has been assigned a high severity score and has been officially fixed by Microsoft in specific updates.

CVE-2026-70585 is a use-after-free vulnerability in the Windows Services for NFS ONCRPC XDR Driver affecting Microsoft Windows Server 2012 and related versions. This flaw allows an authorized local attacker to execute code on the affected system. The vulnerability has been assigned a high severity with a CVSS score of 7. A fix is officially available from Microsoft.

CVE-2026-70582 is a race condition vulnerability in Windows Management Instrumentation on Microsoft Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges due to improper synchronization when accessing shared resources. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. An official fix is available from Microsoft.

CVE-2026-70342 is a high-severity use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an unauthorized attacker to elevate privileges over a network. Official patches have been released to address this issue.

CVE-2026-69890 is a use-after-free vulnerability in the Windows Virtual Trusted Platform Module component of Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.5 and affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official fixes for all affected versions.