CWE-416: Use After Free vulnerabilities

CVE-2026-50215 is a use-after-free vulnerability in the Windows WFP packet-capture driver of Akamai Guardicore Platform Agent before version 7.4. It can be triggered by a local attacker with Administrator privileges sending a crafted IPv6 packet when an IPv6 proxy/redirect rule is active, causing an immediate system crash.

Libreswan's pluto daemon contains a use-after-free vulnerability (CVE-2026-94453) triggered when a client using IKE over TCP closes the connection and another packet is received for the same tuple. This causes the daemon to crash and restart, potentially leading to denial of service. The vulnerability exists because the IKE state retains a pointer to a freed iface_endpoint. Remote code execution may be possible. The vulnerability affects configurations with listen-tcp=yes enabled, which is not the default. Versions from 4.0 up to and including 5.3.2 and 5.4 up to and including 5.4 are affected.

CVE-2026-85876 is a use-after-free vulnerability in Microsoft SQL Server 2019 (GDR) that allows an authorized local attacker to elevate privileges. The flaw affects multiple versions of SQL Server 2019 and later releases prior to specific fixed versions. Microsoft has released official fixes for this vulnerability. The CVSS v3.1 score is 7.0, indicating a high severity impact with potential for complete confidentiality, integrity, and availability compromise if exploited.

Adobe Substance 3D Stager contains a Use After Free vulnerability (CWE-416) that may allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. The CVSS v3.1 base score is 7.8, indicating high severity.

CVE-2026-108136 is a use-after-free vulnerability in the Microsoft Windows Search Component affecting Windows 10 Version 1607 and other specified versions. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.

CVE-2026-108134 is a use-after-free vulnerability in Windows Autopilot on Microsoft Windows 11 Version 24H2. It allows an authorized local attacker to elevate privileges. The vulnerability affects specific builds prior to fixed versions 10.0.26100.9711, 10.0.26200.9711, and 10.0.26300.9711. A patch is available from Microsoft to address this issue.

CVE-2026-97816 is a critical use-after-free vulnerability in OpenSSH for Windows on Microsoft Windows 10 Version 1809 and related builds. It allows an unauthorized attacker to execute code remotely over a network without user interaction. Multiple Windows 10 versions prior to specific fixed builds are affected. Microsoft has released official fixes for all affected versions.

CVE-2026-97809 is a use-after-free vulnerability in the Windows Broadcast DVR User Service on Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Official patches have been released to address this issue in multiple Windows 10 builds.

CVE-2026-97808 is a use-after-free vulnerability in the Windows Broadcast DVR User Service on Microsoft Windows 10 Version 1809 and related builds. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in multiple Windows 10 versions.

CVE-2026-97807 is a use-after-free vulnerability in the Windows Broadcast DVR User Service affecting multiple versions of Microsoft Windows 10. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in several Windows 10 builds.

CVE-2026-97806 is a use-after-free vulnerability in the Windows Broadcast DVR User Service affecting Windows 10 Version 1809 and later builds up to specific patched versions. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed by Microsoft in multiple Windows 10 builds.

CVE-2026-105010 is a critical use-after-free vulnerability in the Microsoft Windows Search Component affecting multiple Windows 10 versions including 1607 and later builds. It allows an unauthorized attacker to elevate privileges over a network without user interaction. The vulnerability has a CVSS score of 9.8 and has been officially fixed in specific Windows 10 updates.

CVE-2026-105006 is a use-after-free vulnerability in the HID class driver of Microsoft Windows 10 Version 1607 and related builds. It allows an unauthorized attacker with physical access to elevate privileges on the affected system. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official fixes for this issue.

CVE-2026-103575 is a use-after-free vulnerability in the Remote Desktop Client component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability affects multiple Windows 10 versions prior to specific fixed builds. Microsoft has released official patches to address this issue.

CVE-2026-103565 is a use-after-free vulnerability in the Windows Broadcast DVR User Service affecting Microsoft Windows 10 Version 1809 and later builds up to specified patched versions. An authorized local attacker can exploit this flaw to elevate privileges on the affected system. The vulnerability has a high severity rating and has been officially fixed by Microsoft in multiple Windows 10 builds.

CVE-2026-103554 is a use-after-free vulnerability in the Windows Broadcast DVR User Service affecting Microsoft Windows 10 Version 1809 and later builds. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7. Microsoft has released official fixes for all affected versions.

CVE-2026-102214 is a use-after-free vulnerability in Windows Hyper-V on Windows 10 Version 1607 and related builds. It allows an authorized local attacker to execute arbitrary code with elevated privileges. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official patches to address this issue.

CVE-2026-102220 is a use-after-free vulnerability in the Windows VHD miniport driver affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating and has been officially fixed by Microsoft in several updates.

CVE-2026-102211 is a use-after-free vulnerability in the Windows Virtualization-Based Security (VBS) Enclave component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score and has been officially fixed by Microsoft in specific Windows 10 builds.

CVE-2026-102208 is a use-after-free vulnerability in the Windows Win32 Kernel Subsystem affecting multiple versions of Microsoft Windows 10, including version 1607 and others. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A patch is available and has been officially released by Microsoft for all affected versions.