CWE-416: Use After Free vulnerabilities

CVE-2026-102201 is a use-after-free vulnerability in Microsoft Windows Media Foundation affecting Windows 10 Version 1809 and later builds up to specific patched versions. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed by Microsoft in multiple Windows 10 builds.

CVE-2026-102197 is a use-after-free vulnerability in the Windows Broadcast DVR User Service affecting multiple builds of Windows 10 Version 1809 and later. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in specific Windows 10 builds.

CVE-2026-102196 is a use-after-free vulnerability in the Windows Broadcast DVR User Service on Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8. Microsoft has released official fixes for affected versions.

CVE-2026-102195 is a use-after-free vulnerability in the Windows Broadcast DVR User Service affecting Windows 11 version 23H2. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed by Microsoft in specific Windows 11 builds.

CVE-2026-102194 is a use-after-free vulnerability in the Windows Graphics Kernel affecting Microsoft Windows 10 Version 1607 and other specified versions. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score and has been officially fixed in multiple Windows 10 builds.

CVE-2026-102193 is a use-after-free vulnerability in the Windows Broadcast DVR User Service affecting Microsoft Windows 10 Version 1809 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.0 and has been officially fixed in multiple Windows 10 builds.

CVE-2026-70023 is a use-after-free vulnerability in Windows Hyper-V on Microsoft Windows 10 Version 1809 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8. Official patches are available for all affected versions.

CVE-2026-100219 is a critical use-after-free vulnerability in Microsoft QUIC on Windows 11 version 23H2 that allows an unauthorized attacker to execute code remotely over a network. The flaw affects multiple builds of Windows 11 23H2 prior to specific fixed versions. Microsoft has released official fixes for all affected versions.

CVE-2026-100218 is a high-severity use-after-free vulnerability in the Remote Desktop Gateway Service of Microsoft Windows 10 Version 1607 and other specified versions. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability has been officially fixed in multiple Windows 10 builds, and patches are available from Microsoft.

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.

Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97745 is a use-after-free vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.8 and affects multiple versions of Microsoft 365 Apps for Enterprise prior to specific fixed releases. Microsoft has issued official fixes for this vulnerability.

CVE-2026-97775 is a use-after-free vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has issued official fixes in multiple versions to address this issue.

CVE-2026-97738 is a high-severity use-after-free vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. It allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to specific fixed releases. Microsoft has issued official fixes for this vulnerability.

CVE-2026-97743 is a use-after-free vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability has a medium severity rating and is addressed in version 16.114.26101123.

CVE-2026-97010 is a high-severity use-after-free vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. It allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions of Microsoft 365 Apps for Enterprise prior to specific fixed releases. Microsoft has released official fixes for this vulnerability.

CVE-2026-96950 is a use-after-free vulnerability in the Windows Universal Disk Format File System Driver (UDFS) affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating and has been officially fixed in several Windows 10 builds.