CWE-416: Use After Free vulnerabilities

CVE-2026-96947 is a use-after-free vulnerability in the Windows Universal Disk Format File System Driver (UDFS) affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.

CVE-2026-96946 is a use-after-free vulnerability in the Windows Universal Disk Format File System Driver (UDFS) affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Official fixes have been released by Microsoft for all affected versions.

CVE-2026-96937 is a use-after-free vulnerability in the Microsoft Windows Search Component affecting Windows 10 Version 21H2 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score and has been officially fixed in multiple Windows 10 versions.

CVE-2026-96934 is a critical use-after-free vulnerability in the Windows DHCP Server component affecting multiple Windows 10 and Windows Server versions. It allows an unauthorized attacker to execute arbitrary code remotely over the network without user interaction. Microsoft has released official fixes for all affected versions.

CVE-2026-96923 is a use-after-free vulnerability in the Windows Workstation Service affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in several Windows 10 builds.

CVE-2026-96919 is a use-after-free vulnerability in the Windows Broadcast DVR User Service affecting multiple builds of Windows 10 Version 1809 and later. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability has a high severity rating and has been officially fixed by Microsoft in specific Windows 10 builds.

CVE-2026-96912 is a use-after-free vulnerability in the Windows Client License Service on Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 and has been officially fixed in multiple Windows 10 versions.

CVE-2026-96852 is a use-after-free vulnerability in the Windows TCP/IP stack affecting Windows 10 Version 1607 and other specified versions. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score and has been officially fixed by Microsoft in multiple Windows 10 builds.

CVE-2026-96324 is a use-after-free vulnerability in the Microsoft Windows Search Component affecting Windows 10 Version 1607 and other versions. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8. Microsoft has released official fixes for all affected versions.

CVE-2026-96322 is a use-after-free vulnerability in the Windows Remote Desktop Protocol affecting multiple Windows 10 versions including version 1607. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score and has been officially fixed in specific Windows updates.

CVE-2026-96323 is a use-after-free vulnerability in Windows Update on Microsoft Windows 10 Version 21H2. It allows an authorized local attacker to elevate privileges. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. A high-severity CVSS 3.1 score of 7.0 has been assigned. Official patches have been released by Microsoft to address this issue.

CVE-2026-96304 is a use-after-free vulnerability in the Windows USB Print Driver affecting Windows 10 Version 21H2 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score and has been officially fixed in multiple Windows 10 builds.

CVE-2026-96253 is a use-after-free vulnerability in the Windows USB Print Driver affecting Windows 10 Version 21H2 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability is rated high severity with a CVSS score of 7. A patch is available and has been officially released by Microsoft.

CVE-2026-96254 is a use-after-free vulnerability in the Windows USB Print Driver affecting Windows 10 Version 21H2 and related builds. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability has a high severity score and has been officially fixed by Microsoft in specific Windows 10 builds.

CVE-2026-96310 is a use-after-free vulnerability in the Windows USB Print Driver affecting Windows 10 Version 21H2 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score and has been officially fixed by Microsoft in multiple Windows 10 builds.

CVE-2026-96301 is a use-after-free vulnerability in the Windows USB Print Driver affecting Windows 10 Version 21H2 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.0 and has been officially fixed by Microsoft in multiple Windows 10 builds.

CVE-2026-96250 is a use-after-free vulnerability in the Windows USB Print Driver affecting Windows 10 Version 21H2 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A security update from Microsoft addresses this issue by fixing the vulnerable versions.

CVE-2026-96249 is a use-after-free vulnerability in the Windows Win32 Kernel Subsystem affecting Windows 11 Version 24H2. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 CVSS v3.1. Microsoft has released official fixes for affected versions.

CVE-2026-85340 is a use-after-free vulnerability in Microsoft Office Click-To-Run within Microsoft 365 Apps for Enterprise. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity with a CVSS score of 7.8. Official patches addressing this issue are available in versions 16.0.14334.20974 and 16.0.17932.21056.

CVE-2026-88144 is a use-after-free vulnerability in Microsoft Office PowerPoint within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Official patches have been released to address this issue.