CWE-416: Use After Free vulnerabilities

CVE-2026-69551 is a use-after-free vulnerability in the Windows DNS component affecting multiple versions of Microsoft Windows 10 and related Windows versions. This flaw allows an authorized attacker to execute code remotely over a network. The vulnerability has been assigned a high severity rating with a CVSS score of 8.8. Official patches have been released to address this issue in the affected Windows versions.

CVE-2026-69500 is a use-after-free vulnerability in Windows Image Acquisition affecting multiple versions of Microsoft Windows 10, including version 1607. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A fix has been officially released by Microsoft for all affected versions.

CVE-2026-69517 is a use-after-free vulnerability in the Windows Wireless Networking component of Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7.0. Microsoft has released official fixes for all affected versions.

CVE-2026-69473 is a use-after-free vulnerability in the Windows Kernel affecting multiple versions of Microsoft Windows 10, including Version 1607. This vulnerability allows an authorized local attacker to elevate privileges. The issue has been assigned a high severity rating with a CVSS score of 7. An official fix is available from Microsoft.

CVE-2026-69470 is a use-after-free vulnerability in the Windows Connected User Experiences and Telemetry component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score and has been officially fixed by Microsoft in specific Windows 10 updates.

CVE-2026-69472 is a use-after-free vulnerability in the Windows Devices Human Interface component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7.0. Microsoft has released official fixes for all affected versions.

CVE-2026-69451 is a use-after-free vulnerability in Windows Management Instrumentation affecting multiple versions of Microsoft Windows 10, including Version 1607. An authorized attacker can exploit this flaw over a network to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in specific Windows updates.

CVE-2026-69413 is a use-after-free vulnerability in the Windows USB Audio Class driver (usbaudio.sys) affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in several Windows 10 builds.

CVE-2026-69401 is a use-after-free vulnerability in the Audio Video Control Transport Protocol component of Microsoft Windows 11 Version 24H2. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating and has been officially fixed by Microsoft in specific Windows 11 builds.

CVE-2026-69362 is a use-after-free vulnerability in Windows Error Reporting affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating and has been officially fixed in specific Windows 10 builds.

CVE-2026-69338 is a use-after-free vulnerability in the Remote Desktop Gateway Service on Microsoft Windows 10 Version 1607 and related versions. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has a high severity with a CVSS score of 7.1. Official patches have been released to address this issue in multiple affected Windows versions.

CVE-2026-69333 is a use-after-free vulnerability in the Windows Win32K component affecting Windows 11 Version 24H2. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7. A fix is available in specific Windows 11 builds.

CVE-2026-69366 is a use-after-free vulnerability in the Windows Kernel affecting Windows 10 Version 1607 and other specified versions. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has a high severity score and has been officially fixed in multiple Windows 10 builds.

CVE-2026-69310 is a use-after-free vulnerability in the Windows DNS component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed by Microsoft in specific updates.

CVE-2026-69296 is a use-after-free vulnerability in the Windows Device Association Service affecting multiple versions of Microsoft Windows 10, including version 1607. An authorized attacker can exploit this flaw over a network to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.1. Official patches have been released for all affected versions.

CVE-2026-69279 is a use-after-free vulnerability in the Windows Cloud Files Mini Filter Driver affecting multiple builds of Windows 10 Version 1809 and later. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability has a high severity score and has been officially fixed in specific Windows 10 builds.

CVE-2026-69281 is a use-after-free vulnerability in the Windows License Manager component of Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A security update addressing this issue has been officially released by Microsoft.

CVE-2026-68893 is a use-after-free vulnerability in the Windows Remote Desktop Licensing Service affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has been assigned a high severity with a CVSS score of 7.1. Official patches have been released to address this issue.

CVE-2026-68846 is a use-after-free vulnerability in the Windows Kernel affecting Windows 10 Version 1607 and other specified versions. It allows an authorized attacker to elevate privileges over a network. The vulnerability has been assigned a high severity with a CVSS score of 7.1. Official patches have been released to address this issue.

CVE-2026-68847 is a use-after-free vulnerability in the Windows Connected User Experiences and Telemetry component of Microsoft Windows 10 Version 21H2. This flaw allows an authorized local attacker to elevate privileges. The vulnerability affects multiple builds of Windows 10 21H2 prior to specific fixed versions. Microsoft has released official fixes for this issue.