CWE-416: Use After Free vulnerabilities

CVE-2026-87704 is a use-after-free vulnerability in Windows Installer affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A patch addressing this issue is officially available from Microsoft.

CVE-2026-87694 is a use-after-free vulnerability in Windows Installer affecting multiple versions of Microsoft Windows 10, including version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official patches that fix this issue in specific updated versions.

CVE-2026-87693 is a use-after-free vulnerability in Windows Installer affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score and has been officially fixed in several Windows 10 builds.

CVE-2026-85941 is a race condition vulnerability in the Windows Installer component of Microsoft Windows 10 Version 1607 and related builds. It allows a locally authorized attacker to elevate privileges due to improper synchronization when accessing shared resources. The vulnerability has been assigned a high severity score of 7.0 and affects multiple Windows 10 builds prior to specific fixed versions.

CVE-2026-69798 is a use-after-free vulnerability in the Windows Wired AutoConfig Service affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Official patches are available for all affected versions.

CVE-2026-85874 is a use-after-free vulnerability in the Windows Message Queuing Queue Manager affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized attacker with local access to execute arbitrary code. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official patches that fix the issue in the specified fixed versions.

CVE-2026-83930 is a use-after-free vulnerability in the Windows Update Orchestrator Service on Microsoft Windows 11 version 23H2. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in several Windows 11 builds.

CVE-2026-83924 is a use-after-free vulnerability in the Windows Kernel affecting multiple versions of Microsoft Windows 10, including Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating and has been officially fixed by Microsoft in specific updates for the affected versions.

CVE-2026-83915 is a use-after-free vulnerability in the Windows Diagnostic Policy Service affecting Windows 10 Version 1809 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7. An official fix is available from Microsoft.

CVE-2026-83913 is a use-after-free vulnerability in the Windows Kernel affecting Windows 10 Version 21H2 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity CVSS score of 7.8 and has been officially fixed by Microsoft in multiple updated versions.

CVE-2026-85911 is a use-after-free vulnerability in the Windows StateRepository API affecting multiple builds of Windows 10 Version 1809 and later. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.

CVE-2026-85906 is a use-after-free vulnerability in Windows Direct Composition affecting Windows 10 Version 21H2 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed by Microsoft in multiple Windows 10 builds.

CVE-2026-85872 is a use-after-free vulnerability in the Windows Storage VSP Driver affecting multiple builds of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 and has been officially fixed in various Windows 10 builds.

CVE-2026-83900 is a use-after-free vulnerability in the Windows Bind Filter Driver affecting Microsoft Windows 11 version 23H2. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score and has been officially fixed by Microsoft in several updated versions of Windows 11 23H2.

CVE-2026-83883 is a use-after-free vulnerability in the Windows Win32K component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in multiple Windows 10 builds.

CVE-2026-83859 is a use-after-free vulnerability in the Windows NTFS component affecting multiple versions of Microsoft Windows 10, including Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity score of 7.8 and has been officially fixed in specific Windows 10 updates.

CVE-2026-83790 is a use-after-free vulnerability in Windows Hello on Microsoft Windows 10 Version 21H2. It allows an authorized local attacker to elevate privileges. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official fixes for all affected versions.

CVE-2026-83785 is a use-after-free vulnerability in the Windows COM+ Event System Service affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in several Windows 10 builds.

CVE-2026-83771 is a use-after-free vulnerability in the Windows Camera Frame Server Monitor component of Microsoft Windows 11 version 23H2. This flaw allows an unauthorized attacker to elevate privileges over an adjacent network. The vulnerability has a high severity with a CVSS score of 8.8 and affects multiple builds of Windows 11 23H2 prior to specific fixed versions. Microsoft has released official fixes for this vulnerability.

CVE-2026-83762 is a use-after-free vulnerability in the Windows Win32K component affecting Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in multiple Windows 10 builds.