CWE-416: Use After Free vulnerabilities

CVE-2026-83756 is a use-after-free vulnerability in the Windows Win32 Kernel Subsystem affecting Windows 10 Version 21H2 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in multiple Windows 10 versions.

CVE-2026-83752 is a use-after-free vulnerability in Windows Installer affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating and has been officially fixed by Microsoft in specific updates.

CVE-2026-83751 is a use-after-free vulnerability in the Windows MIDI Service Module of Microsoft Windows 11 Version 24H2. It allows an authorized local attacker to elevate privileges. The vulnerability affects specific builds of Windows 11 Version 24H2 prior to certain fixed versions. A high-severity CVSS 3.1 score of 7.0 has been assigned. An official fix is available from Microsoft.

CVE-2026-83739 is a use-after-free vulnerability in the Windows Bluetooth Service affecting multiple builds of Windows 10 Version 1809 and later. This flaw allows an unauthorized attacker to execute code over an adjacent network. The vulnerability has a high severity rating with a CVSS score of 7.5. Official patches have been released to address this issue in specific Windows 10 builds.

CVE-2026-83732 is a use-after-free vulnerability in the Windows Win32K component affecting Windows 10 Version 1607 and related builds. An authorized local attacker can exploit this flaw to elevate privileges. Microsoft has released official fixes for multiple affected versions.

CVE-2026-83721 is a use-after-free vulnerability in the Windows Win32K component affecting Windows 11 Version 24H2. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed by Microsoft in specific Windows 11 builds.

CVE-2026-83720 is a use-after-free vulnerability in the Windows Kerberos component of Microsoft Windows 11 version 26H1. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability affects Windows 11 builds from 10.0.28000.0 up to but not including 10.0.28000.3231. Microsoft has released an official fix in version 10.0.28000.3231. The vulnerability has a high severity rating with a CVSS score of 7.0 and does not have known exploits in the wild at this time.

CVE-2026-83718 is a use-after-free vulnerability in Windows Installer affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in several Windows updates.

CVE-2026-83717 is a use-after-free vulnerability in Windows Installer affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A fix is officially available from Microsoft.

CVE-2026-83702 is a use-after-free vulnerability in Windows Installer on Microsoft Windows 10 Version 1607 and other versions. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.0 and affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official fixes for this vulnerability.

CVE-2026-83701 is a use-after-free vulnerability in the Windows Now Playing Session Manager component of Microsoft Windows 10 Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A fix is available and has been officially released by Microsoft.

CVE-2026-83696 is a use-after-free vulnerability in the Windows Cloud Files Mini Filter Driver affecting Microsoft Windows 10 Version 1809 and related builds. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in multiple Windows 10 versions.

CVE-2026-83689 is a use-after-free vulnerability in Windows Error Reporting on Microsoft Windows 10 Version 1607 and other versions. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A fix is available and has been officially released by Microsoft.

CVE-2026-83682 is a use-after-free vulnerability in the Windows TCP/IP stack affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in several Windows 10 builds.

CVE-2026-83679 is a use-after-free vulnerability in the Windows Defender Firewall Service on Microsoft Windows 11 version 23H2. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for affected versions.

CVE-2026-83582 is a use-after-free vulnerability in the Windows Graphics Kernel affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to disclose information. The vulnerability has a medium severity rating with a CVSS score of 4.7. Official patches have been released to address this issue in the affected versions.

CVE-2026-83574 is a use-after-free vulnerability in the Microsoft Windows Search Component affecting multiple versions of Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.0 and has been officially fixed in several Windows 10 updates.

CVE-2026-83570 is a use-after-free vulnerability in the Microsoft Windows Search Component affecting Windows 10 Version 1607 and other specified builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.

CVE-2026-83566 is a use-after-free vulnerability in the Windows Win32K component (ICOMP) affecting Windows 11 Version 24H2. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score and has been officially fixed in specific Windows 11 builds.

CVE-2026-83564 is a use-after-free vulnerability in the Microsoft Windows Search Component affecting multiple Windows 10 versions including 1607. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score and has been officially fixed in several Windows 10 builds.