CWE-416 · Use After Free (page 4)
Page 4 of 82 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-50687 | High | 8.8 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50677 | High | 7.8 | 2026-07-14 | Use after free in Windows Media allows an authorized attacker to elevate privileges locally. |
CVE-2026-50676 | High | 7.8 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privilege… |
CVE-2026-50674 | High | 7.0 | 2026-07-14 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-50672 | High | 7.0 | 2026-07-14 | Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-50669 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… |
CVE-2026-50666 | High | 8.8 | 2026-07-14 | Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges over a network. |
CVE-2026-50505 | High | 7.5 | 2026-07-14 | Use after free in Windows Message Queuing allows an authorized attacker to execute code over a network. |
CVE-2026-50500 | High | 7.5 | 2026-07-14 | Use after free in Windows Netlogon allows an authorized attacker to elevate privileges over a network. |
CVE-2026-50493 | High | 7.8 | 2026-07-14 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50490 | High | 7.0 | 2026-07-14 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-50487 | High | 8.1 | 2026-07-14 | Use after free in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-50486 | High | 7.8 | 2026-07-14 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-50478 | High | 7.8 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50476 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally. |
CVE-2026-50474 | High | 8.8 | 2026-07-14 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-50467 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-50466 | High | 7.8 | 2026-07-14 | Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-50460 | High | 8.1 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privi… |
CVE-2026-50459 | High | 7.0 | 2026-07-14 | Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-50458 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-50457 | High | 7.8 | 2026-07-14 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-50452 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privi… |
CVE-2026-50449 | High | 7.0 | 2026-07-14 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-50440 | High | 7.8 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to elevate p… |
CVE-2026-50439 | High | 8.1 | 2026-07-14 | Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. |
CVE-2026-50436 | High | 7.8 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50433 | High | 7.8 | 2026-07-14 | Use after free in Windows Media allows an authorized attacker to elevate privileges locally. |
CVE-2026-50432 | Medium | 5.3 | 2026-07-14 | Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to deny service over a network. |
CVE-2026-50427 | High | 7.8 | 2026-07-14 | Use after free in Content Delivery Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-50425 | High | 7.8 | 2026-07-14 | Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally. |
CVE-2026-50414 | High | 7.5 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privilege… |
CVE-2026-50413 | High | 8.8 | 2026-07-14 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-50410 | High | 7.0 | 2026-07-14 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-50406 | High | 7.0 | 2026-07-14 | Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally. |
CVE-2026-50404 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privilege… |
CVE-2026-50403 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privile… |
CVE-2026-50398 | High | 8.8 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privilege… |
CVE-2026-50397 | High | 7.0 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50396 | High | 7.0 | 2026-07-14 | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
CVE-2026-50393 | High | 7.0 | 2026-07-14 | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
CVE-2026-50392 | High | 7.0 | 2026-07-14 | Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
CVE-2026-50385 | High | 8.8 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privile… |
CVE-2026-50379 | High | 7.5 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privilege… |
CVE-2026-50374 | Medium | 6.3 | 2026-07-14 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges with a physical attack. |
CVE-2026-50371 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows LUAFV allows an authorized attacker to elevate privilege… |
CVE-2026-50369 | High | 8.8 | 2026-07-14 | Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. |
CVE-2026-50359 | High | 7.0 | 2026-07-14 | Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally. |
CVE-2026-50358 | High | 7.0 | 2026-07-14 | Use after free in Windows Media allows an authorized attacker to elevate privileges locally. |
CVE-2026-50353 | High | 7.8 | 2026-07-14 | Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. |
CVE-2026-50348 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privi… |
CVE-2026-50345 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privile… |
CVE-2026-50340 | High | 8.5 | 2026-07-14 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges over a network. |
CVE-2026-50331 | High | 7.8 | 2026-07-14 | Use after free in Windows Application Model allows an authorized attacker to elevate privileges locally. |
CVE-2026-50329 | High | 7.8 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50326 | High | 7.8 | 2026-07-14 | Use after free in Windows Unified Consent System allows an authorized attacker to elevate privileges locally. |
CVE-2026-50322 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privile… |
CVE-2026-50321 | High | 7.8 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate priv… |
CVE-2026-50317 | High | 7.8 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Operating Systems allows an authorized attacker to eleva… |
CVE-2026-50314 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-50312 | Medium | 4.7 | 2026-07-14 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-50307 | High | 7.0 | 2026-07-14 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
CVE-2026-50306 | High | 7.8 | 2026-07-14 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
CVE-2026-50305 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-47642 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-47290 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-58608 | High | 8.8 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker t… |
CVE-2026-58602 | High | 7.8 | 2026-07-14 | Use after free in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-58526 | High | 7.0 | 2026-07-14 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
CVE-2026-55948 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55000 | Medium | 6.4 | 2026-07-14 | Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-54995 | High | 8.1 | 2026-07-14 | Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. |
CVE-2026-54989 | High | 7.0 | 2026-07-14 | Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally. |
CVE-2026-54129 | High | 7.0 | 2026-07-14 | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
CVE-2026-54127 | High | 7.4 | 2026-07-14 | Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-54114 | High | 7.8 | 2026-07-14 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-54112 | High | 7.8 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileg… |
CVE-2026-50694 | High | 8.1 | 2026-07-14 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. |
CVE-2026-50384 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clip Service allows an authorized attacker to elevate pr… |
CVE-2026-50354 | High | 7.1 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50323 | High | 7.0 | 2026-07-14 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-50296 | High | 7.0 | 2026-07-14 | Use after free in Graphics Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50293 | High | 7.8 | 2026-07-14 | Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges locally. |
CVE-2026-49808 | High | 7.8 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileg… |
CVE-2026-49806 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevat… |
CVE-2026-49802 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevat… |
CVE-2026-49798 | Critical | 9.3 | 2026-07-14 | Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-49795 | High | 8.8 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-49784 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to ele… |
CVE-2026-49183 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard Server allows an authorized attacker to elevat… |
CVE-2026-49173 | High | 7.8 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-49171 | High | 7.5 | 2026-07-14 | Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. |
CVE-2026-49169 | High | 8.0 | 2026-07-14 | Use after free in DNS Server allows an authorized attacker to execute code over a network. |
CVE-2026-49167 | Medium | 4.7 | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-49166 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally. |
CVE-2026-49162 | High | 7.0 | 2026-07-14 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-48572 | High | 7.0 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Installer allows an authorized attacker to elevate p… |
CVE-2026-48571 | High | 7.0 | 2026-07-14 | Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-44800 | High | 7.8 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev… |
CVE-2026-42900 | High | 8.1 | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Store allows an unauthorized attacker to elevate pri… |