CWE-416 · Use After Free (page 4)
Page 4 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-81973 | High | 7.8 | 2026-09-08 | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of… |
CVE-2026-80162 | Medium | 5.5 | 2026-09-08 | Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability t… |
CVE-2026-79909 | High | 7.8 | 2026-09-08 | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of… |
CVE-2026-85360 | High | 7.0 | 2026-09-08 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-83997 | High | 8.1 | 2026-09-08 | Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. |
CVE-2026-83979 | High | 7.8 | 2026-09-08 | Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83968 | High | 7.8 | 2026-09-08 | Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83940 | High | 7.0 | 2026-09-08 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-81954 | High | 7.8 | 2026-09-08 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-80093 | High | 7.0 | 2026-09-08 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-80081 | High | 8.8 | 2026-09-08 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
CVE-2026-78525 | High | 8.8 | 2026-09-08 | Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
CVE-2026-78523 | Medium | 5.9 | 2026-09-08 | Use after free in Windows DNS allows an unauthorized attacker to deny service over a network. |
CVE-2026-78514 | High | 8.8 | 2026-09-08 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-78507 | High | 8.8 | 2026-09-08 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-78457 | High | 7.0 | 2026-09-08 | Use after free in Windows Security Health Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-78450 | High | 8.1 | 2026-09-08 | Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. |
CVE-2026-78449 | High | 8.1 | 2026-09-08 | Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. |
CVE-2026-78446 | Medium | 5.3 | 2026-09-08 | Use after free in Windows Distributed File System (DFS) allows an authorized attacker to deny service over a network. |
CVE-2026-78445 | Critical | 9.8 | 2026-09-08 | Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network. |
CVE-2026-77905 | High | 7.0 | 2026-09-08 | Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
CVE-2026-77899 | High | 7.0 | 2026-09-08 | Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally. |
CVE-2026-77894 | High | 7.0 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privi… |
CVE-2026-77505 | High | 8.1 | 2026-09-08 | Use after free in DNS Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-77485 | High | 7.0 | 2026-09-08 | Use after free in SQL Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-73022 | High | 7.0 | 2026-09-08 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
CVE-2026-73010 | Critical | 9.8 | 2026-09-08 | Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. |
CVE-2026-73009 | Critical | 9.8 | 2026-09-08 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. |
CVE-2026-73005 | High | 7.0 | 2026-09-08 | Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally. |
CVE-2026-73003 | High | 7.0 | 2026-09-08 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
CVE-2026-72987 | High | 8.1 | 2026-09-08 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. |
CVE-2026-72983 | Critical | 9.8 | 2026-09-08 | Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network. |
CVE-2026-72981 | High | 8.1 | 2026-09-08 | Use after free in IP Helper allows an unauthorized attacker to execute code over a network. |
CVE-2026-72979 | Critical | 9.8 | 2026-09-08 | Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-72965 | High | 7.8 | 2026-09-08 | Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-72963 | High | 7.0 | 2026-09-08 | Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-72954 | High | 7.5 | 2026-09-08 | Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network. |
CVE-2026-72943 | High | 7.5 | 2026-09-08 | Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network. |
CVE-2026-72936 | High | 8.1 | 2026-09-08 | Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-72930 | High | 7.0 | 2026-09-08 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally. |
CVE-2026-72928 | High | 7.5 | 2026-09-08 | Use after free in Windows DNS allows an authorized attacker to execute code over a network. |
CVE-2026-72926 | High | 7.0 | 2026-09-08 | Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-71342 | High | 7.0 | 2026-09-08 | Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-71340 | High | 7.0 | 2026-09-08 | Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-71333 | High | 7.0 | 2026-09-08 | Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-71332 | High | 7.0 | 2026-09-08 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally. |
CVE-2026-70585 | High | 7.0 | 2026-09-08 | Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally. |
CVE-2026-70582 | Medium | 6.4 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker… |
CVE-2026-70577 | High | 7.0 | 2026-09-08 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
CVE-2026-70570 | High | 7.5 | 2026-09-08 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
CVE-2026-70565 | High | 7.0 | 2026-09-08 | Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker to elevate privileges locally. |
CVE-2026-70342 | High | 8.1 | 2026-09-08 | Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-69989 | High | 8.1 | 2026-09-08 | Use after free in DNS Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-69911 | High | 7.0 | 2026-09-08 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-69896 | High | 7.0 | 2026-09-08 | Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
CVE-2026-69891 | High | 7.0 | 2026-09-08 | Use after free in Windows Media allows an authorized attacker to elevate privileges locally. |
CVE-2026-69890 | High | 7.5 | 2026-09-08 | Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally. |
CVE-2026-69889 | High | 7.0 | 2026-09-08 | Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69876 | High | 8.0 | 2026-09-08 | Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network. |
CVE-2026-69866 | High | 7.0 | 2026-09-08 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69864 | High | 7.8 | 2026-09-08 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. |
CVE-2026-69858 | High | 8.1 | 2026-09-08 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. |
CVE-2026-69838 | High | 7.0 | 2026-09-08 | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
CVE-2026-69834 | High | 7.0 | 2026-09-08 | Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally. |
CVE-2026-69827 | High | 8.1 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over… |
CVE-2026-69818 | High | 7.0 | 2026-09-08 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-69817 | High | 7.0 | 2026-09-08 | Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-69816 | High | 7.0 | 2026-09-08 | Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally. |
CVE-2026-69814 | High | 7.0 | 2026-09-08 | Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally. |
CVE-2026-69813 | High | 8.1 | 2026-09-08 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. |
CVE-2026-69797 | High | 8.8 | 2026-09-08 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
CVE-2026-69791 | High | 7.0 | 2026-09-08 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69784 | High | 8.8 | 2026-09-08 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. |
CVE-2026-69782 | High | 8.1 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over… |
CVE-2026-69775 | High | 7.1 | 2026-09-08 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69767 | High | 8.8 | 2026-09-08 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
CVE-2026-69761 | High | 7.1 | 2026-09-08 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69757 | High | 7.1 | 2026-09-08 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69740 | High | 8.8 | 2026-09-08 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. |
CVE-2026-69735 | High | 7.0 | 2026-09-08 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69730 | Critical | 9.8 | 2026-09-08 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. |
CVE-2026-69712 | High | 8.8 | 2026-09-08 | Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network. |
CVE-2026-69711 | High | 7.0 | 2026-09-08 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69708 | High | 7.0 | 2026-09-08 | Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally. |
CVE-2026-69706 | High | 7.1 | 2026-09-08 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69693 | High | 7.0 | 2026-09-08 | Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69692 | High | 7.0 | 2026-09-08 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69682 | High | 7.0 | 2026-09-08 | Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69678 | High | 8.8 | 2026-09-08 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
CVE-2026-69654 | High | 7.0 | 2026-09-08 | Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally. |
CVE-2026-69652 | High | 7.0 | 2026-09-08 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-69648 | High | 7.0 | 2026-09-08 | Use after free in Windows Notification allows an authorized attacker to elevate privileges locally. |
CVE-2026-69645 | High | 7.0 | 2026-09-08 | Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally. |
CVE-2026-69632 | High | 8.8 | 2026-09-08 | Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network. |
CVE-2026-69613 | High | 7.0 | 2026-09-08 | Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. |
CVE-2026-69611 | High | 7.0 | 2026-09-08 | Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-69607 | High | 7.5 | 2026-09-08 | Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. |
CVE-2026-69606 | High | 7.0 | 2026-09-08 | Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. |
CVE-2026-69605 | High | 7.0 | 2026-09-08 | Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69602 | High | 7.1 | 2026-09-08 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network. |