← Back
CWE-416

9,595 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

JSON object

Loading...

CVEs (9,595)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-88103
1Microsoft
9Windows 10 1809
Windows 10 21h2Windows 10 22h2+6 more
Oct 16, 2026
Oct 13, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-88102
1Microsoft
3Windows Server 2019
Windows Server 2022Windows Server 2025
Oct 16, 2026
Oct 13, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
CVE-2026-88100
1Microsoft
5Windows 11 24h2
Windows 11 25h2Windows 11 26h1+2 more
Oct 16, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
CVE-2026-88080
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 16, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-88073
1Microsoft
8Windows 10 21h2
Windows 10 22h2Windows 11 23h2+5 more
Oct 16, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-87715
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 16, 2026
Oct 13, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-87713
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Oct 16, 2026
Oct 13, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network.
CVE-2026-87712
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 16, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.
CVE-2026-87708
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 28, 2026
Oct 13, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-87704
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 28, 2026
Oct 13, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-87700
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 28, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-87694
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 27, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-87693
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 28, 2026
Oct 13, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-87691
1Microsoft
6Windows 11 23h2
Windows 11 24h2Windows 11 25h2+3 more
Oct 28, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
CVE-2026-85945
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 28, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-85941
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 28, 2026
Oct 13, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-85934
1Microsoft
11Windows 10 1809
Windows 10 21h2Windows 10 22h2+8 more
Oct 28, 2026
Oct 13, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85933
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 28, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-85930
1Microsoft
9Windows 10 21h2
Windows 10 22h2Windows 11 23h2+6 more
Oct 28, 2026
Oct 13, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
CVE-2026-85926
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 16, 2026
Oct 13, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.