CWE-416: Use After Free vulnerabilities

1,803 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.0	EPSS 0.3%	CVE-2026-62788Microsoft Windows 11 version 23H2 · Use After Free High7.0EPSS 0.3%2026-08-11CVE Database V5CVE-2026-62788 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-416	CVE Database V5	2026-08-11
High	7.0	EPSS 0.2%	CVE-2026-62780Microsoft Windows 11 version 23H2 · Use After Free High7.0EPSS 0.2%2026-08-11CVE Database V5CVE-2026-62780 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. EPSS 0.2%Vulnerability CWE-416	CVE Database V5	2026-08-11
High	8.1	EPSS 0.5%	CVE-2026-62778Microsoft Windows 10 Version 1607 · Use After Free High8.1EPSS 0.5%2026-08-11CVE Database V5CVE-2026-62778 Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network. EPSS 0.5%Vulnerability CWE-416	CVE Database V5	2026-08-11
High	7.0	EPSS 0.3%	CVE-2026-62749Microsoft Windows 11 Version 24H2 · Use After Free High7.0EPSS 0.3%2026-08-11CVE Database V5CVE-2026-62749 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-416	CVE Database V5	2026-08-11
High	7.0	EPSS 0.2%	CVE-2026-62734Microsoft Windows 10 Version 1607 · Race Condition High7.0EPSS 0.2%2026-08-11CVE Database V5CVE-2026-62734 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally. EPSS 0.2%Vulnerability CWE-362	CVE Database V5	2026-08-11
High	7.0	EPSS 0.3%	CVE-2026-62726Microsoft Windows 10 Version 1607 · Use After Free High7.0EPSS 0.3%2026-08-11CVE Database V5CVE-2026-62726 Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-416	CVE Database V5	2026-08-11
High	7.0	EPSS 0.3%	CVE-2026-62725Microsoft Windows 10 Version 1607 · Use After Free High7.0EPSS 0.3%2026-08-11CVE Database V5CVE-2026-62725 Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-416	CVE Database V5	2026-08-11
High	7.8	EPSS 0.3%	CVE-2026-62711Microsoft Windows 10 Version 1607 · Use After Free High7.8EPSS 0.3%2026-08-11CVE Database V5CVE-2026-62711 Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-416	CVE Database V5	2026-08-11
Medium	6.4	EPSS 0.3%	CVE-2026-62708Microsoft Windows 11 Version 24H2 · Use After Free Medium6.4EPSS 0.3%2026-08-11CVE Database V5CVE-2026-62708 Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack. EPSS 0.3%Vulnerability CWE-416	CVE Database V5	2026-08-11
High	7.8	EPSS 0.3%	CVE-2026-62701Microsoft Windows 10 Version 1607 · Use After Free High7.8EPSS 0.3%2026-08-11CVE Database V5CVE-2026-62701 Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-416	CVE Database V5	2026-08-11
High	7.0	EPSS 0.3%	CVE-2026-61938Microsoft Windows 11 Version 24H2 · Use After Free High7.0EPSS 0.3%2026-08-11CVE Database V5CVE-2026-61938 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-416	CVE Database V5	2026-08-11
High	7.0	EPSS 0.3%	CVE-2026-61929Microsoft Windows 11 version 23H2 · Use After Free High7.0EPSS 0.3%2026-08-11CVE Database V5CVE-2026-61929 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-416	CVE Database V5	2026-08-11
Medium	6.6	EPSS 0.5%	CVE-2026-61920Microsoft Windows Server 2012 R2 · Race Condition Medium6.6EPSS 0.5%2026-08-11CVE Database V5CVE-2026-61920 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network. EPSS 0.5%Vulnerability CWE-362	CVE Database V5	2026-08-11
High	7.8	EPSS 0.3%	CVE-2026-61357Microsoft Windows 11 Version 24H2 · Use After Free High7.8EPSS 0.3%2026-08-11CVE Database V5CVE-2026-61357 Use after free in Application Information Services allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-416	CVE Database V5	2026-08-11
High	7.8	EPSS 0.3%	CVE-2026-61349Microsoft Windows 10 Version 1607 · Use After Free High7.8EPSS 0.3%2026-08-11CVE Database V5CVE-2026-61349 Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-416	CVE Database V5	2026-08-11
High	7.0	EPSS 0.3%	CVE-2026-59125Microsoft Windows 10 Version 1607 · Use After Free High7.0EPSS 0.3%2026-08-11CVE Database V5CVE-2026-59125 Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-416	CVE Database V5	2026-08-11
High	7.0	EPSS 0.2%	CVE-2026-59122Microsoft Windows 10 Version 1607 · Race Condition High7.0EPSS 0.2%2026-08-11CVE Database V5CVE-2026-59122 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally. EPSS 0.2%Vulnerability CWE-362	CVE Database V5	2026-08-11
High	7.0	EPSS 0.3%	CVE-2026-65783Microsoft Windows 11 Version 24H2 · Use After Free High7.0EPSS 0.3%2026-08-11CVE Database V5CVE-2026-65783 Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-416	CVE Database V5	2026-08-11
High	7.8	EPSS 0.5%	CVE-2026-70311Microsoft 365 Apps for Enterprise · Use After Free High7.8EPSS 0.5%2026-08-11CVE Database V5CVE-2026-70311 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. EPSS 0.5%Vulnerability CWE-416	CVE Database V5	2026-08-11
High	7.0	EPSS 0.3%	CVE-2026-70307Microsoft Windows 10 Version 1607 · Use After Free High7.0EPSS 0.3%2026-08-11CVE Database V5CVE-2026-70307 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-416	CVE Database V5	2026-08-11

Page 37 of 91