CWE-416 · Use After Free (page 5)
Page 5 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-69600 | High | 7.0 | 2026-09-08 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-69599 | High | 7.5 | 2026-09-08 | Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network. |
CVE-2026-69597 | High | 7.1 | 2026-09-08 | Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69595 | Critical | 9.8 | 2026-09-08 | Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network. |
CVE-2026-69581 | High | 7.0 | 2026-09-08 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69579 | Critical | 9.8 | 2026-09-08 | Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. |
CVE-2026-69576 | High | 7.8 | 2026-09-08 | Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally. |
CVE-2026-69575 | High | 7.0 | 2026-09-08 | Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
CVE-2026-69574 | High | 7.0 | 2026-09-08 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69573 | High | 7.0 | 2026-09-08 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-69567 | High | 7.0 | 2026-09-08 | Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-69560 | High | 7.0 | 2026-09-08 | Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69551 | High | 8.8 | 2026-09-08 | Use after free in Windows DNS allows an authorized attacker to execute code over a network. |
CVE-2026-69546 | High | 8.1 | 2026-09-08 | Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. |
CVE-2026-69540 | High | 7.0 | 2026-09-08 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69539 | High | 7.5 | 2026-09-08 | Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network. |
CVE-2026-69536 | High | 7.1 | 2026-09-08 | Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network. |
CVE-2026-69530 | High | 8.1 | 2026-09-08 | Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. |
CVE-2026-69525 | Critical | 9.8 | 2026-09-08 | Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. |
CVE-2026-69524 | High | 8.1 | 2026-09-08 | Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. |
CVE-2026-69517 | High | 7.0 | 2026-09-08 | Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally. |
CVE-2026-69516 | High | 7.0 | 2026-09-08 | Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. |
CVE-2026-69500 | High | 7.0 | 2026-09-08 | Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. |
CVE-2026-69498 | High | 7.0 | 2026-09-08 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-69488 | High | 7.0 | 2026-09-08 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69474 | Medium | 4.8 | 2026-09-08 | Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network. |
CVE-2026-69473 | High | 7.0 | 2026-09-08 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-69472 | High | 7.0 | 2026-09-08 | Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally. |
CVE-2026-69470 | High | 7.0 | 2026-09-08 | Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. |
CVE-2026-69460 | High | 7.1 | 2026-09-08 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69451 | High | 7.1 | 2026-09-08 | Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69441 | High | 7.0 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privi… |
CVE-2026-69430 | High | 7.0 | 2026-09-08 | Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69422 | High | 7.0 | 2026-09-08 | Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-69413 | High | 7.0 | 2026-09-08 | Use after free in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. |
CVE-2026-69410 | High | 7.0 | 2026-09-08 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-69401 | High | 7.0 | 2026-09-08 | Use after free in Audio Video Control Transport Protocol allows an authorized attacker to elevate privileges locally. |
CVE-2026-69397 | High | 7.5 | 2026-09-08 | Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. |
CVE-2026-69396 | High | 7.1 | 2026-09-08 | Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69392 | High | 7.8 | 2026-09-08 | Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. |
CVE-2026-69388 | High | 7.0 | 2026-09-08 | Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69385 | High | 7.0 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileg… |
CVE-2026-69366 | High | 7.1 | 2026-09-08 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69364 | High | 7.1 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker t… |
CVE-2026-69362 | High | 7.0 | 2026-09-08 | Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
CVE-2026-69357 | High | 7.1 | 2026-09-08 | Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69341 | High | 7.0 | 2026-09-08 | Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. |
CVE-2026-69338 | High | 7.1 | 2026-09-08 | Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69335 | High | 7.0 | 2026-09-08 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-69333 | High | 7.0 | 2026-09-08 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-69331 | High | 7.0 | 2026-09-08 | Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-69319 | High | 7.0 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker to elevat… |
CVE-2026-69314 | High | 7.1 | 2026-09-08 | Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69311 | High | 7.0 | 2026-09-08 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69310 | High | 7.0 | 2026-09-08 | Use after free in Windows DNS allows an authorized attacker to elevate privileges locally. |
CVE-2026-69305 | High | 7.1 | 2026-09-08 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69300 | High | 7.0 | 2026-09-08 | Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
CVE-2026-69299 | High | 7.0 | 2026-09-08 | Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally. |
CVE-2026-69296 | High | 7.1 | 2026-09-08 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69287 | High | 7.0 | 2026-09-08 | Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
CVE-2026-69281 | High | 7.0 | 2026-09-08 | Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-69280 | High | 7.0 | 2026-09-08 | Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
CVE-2026-69279 | High | 7.0 | 2026-09-08 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-69275 | High | 7.0 | 2026-09-08 | Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-69274 | High | 7.1 | 2026-09-08 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network. |
CVE-2026-68893 | High | 7.1 | 2026-09-08 | Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network. |
CVE-2026-68886 | Medium | 5.5 | 2026-09-08 | Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally. |
CVE-2026-68847 | High | 7.0 | 2026-09-08 | Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. |
CVE-2026-68846 | High | 7.1 | 2026-09-08 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network. |
CVE-2026-68843 | Medium | 5.5 | 2026-09-08 | Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally. |
CVE-2026-68840 | High | 7.0 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate priv… |
CVE-2026-68837 | High | 7.0 | 2026-09-08 | Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-68835 | High | 7.1 | 2026-09-08 | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network. |
CVE-2026-68825 | High | 7.0 | 2026-09-08 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-68824 | High | 7.0 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an autho… |
CVE-2026-67385 | High | 8.8 | 2026-09-08 | Use after free in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-62813 | High | 7.5 | 2026-09-08 | Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network. |
CVE-2026-62697 | High | 7.8 | 2026-09-08 | Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
CVE-2026-62694 | High | 7.0 | 2026-09-08 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-56177 | High | 7.8 | 2026-09-08 | Use after free in Windows Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-56172 | High | 7.8 | 2026-09-08 | Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-50349 | High | 7.0 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authoriz… |
CVE-2026-82063 | Medium | 5.3 | 2026-09-08 | A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service. Under specific… |
CVE-2026-82061 | High | 8.1 | 2026-09-08 | A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a writ… |
CVE-2026-82056 | Medium | 5.3 | 2026-09-08 | A race condition in MongoDB server's text index query parsing can cause a heap use-after-free read when handling upsert retry paths. Under certain concurrent i… |
CVE-2026-9034 | High | 7.8 | 2026-09-08 | Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driv… |
CVE-2026-7477 | High | 7.8 | 2026-09-08 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows… |
CVE-2026-7476 | High | 7.8 | 2026-09-08 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows… |
CVE-2026-5729 | High | 7.8 | 2026-09-08 | Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user proces… |
CVE-2026-12387 | Medium | 5.1 | 2026-09-08 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows… |
CVE-2026-12285 | Medium | 4.0 | 2026-09-08 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows… |
CVE-2026-11891 | Medium | 5.1 | 2026-09-08 | Use After Free vulnerability in Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user proces… |
CVE-2026-0001 | Medium | 4.4 | 2026-09-08 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows… |
CVE-2026-86713 | High | 7.1 | 2026-09-08 | PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in the load_mon module's stop path where exit_and_cleanup() deletes the LoadMon object and… |
CVE-2026-86425 | Low | 3.3 | 2026-09-07 | ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the Layer method of PerlMagick. An attacker who supplies… |
CVE-2026-86423 | Low | 3.3 | 2026-09-07 | ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the GetList method of PerlMagick. A crafted call to the… |
CVE-2026-82325 | | 2026-09-07 | A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via craf… | |
CVE-2026-20517 | Medium | 6.7 | 2026-09-07 | In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has alre… |
CVE-2026-20515 | Medium | 5.5 | 2026-09-07 | In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User execution privileges needed. User int… |
CVE-2026-20511 | Medium | 6.7 | 2026-09-07 | In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has alrea… |