Vulnerabilities

Use after free in Windows exFAT File System allows an authorized attacker to elevate privileges locally.

Use after free in Windows exFAT File System allows an authorized attacker to elevate privileges locally.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Microsoft

Product

Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2

CVSS v3.1

7.0 AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness

CWE-416

Exposure class

Operating system

NVD status

Awaiting Analysis

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-112766 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 45
   CVE NVD 3h ago

   Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-114170 Microsoft
2. 39
   CVE NVD 3h ago

   Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

   CVSS 6.4 CVE-2026-113864 Microsoft
3. 46
   CVE NVD 3h ago

   Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

   CVSS 7.5 CVE-2026-113861 Microsoft
4. 46
   CVE NVD 3h ago

   Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-113860 Microsoft
5. 39
   CVE NVD 3h ago

   Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-113842 Microsoft
6. 39
   CVE NVD 3h ago

   Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-113820 Microsoft
7. 39
   CVE NVD 3h ago

   Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-113819 Microsoft
8. 36
   CVE NVD 3h ago

   Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-113769 Microsoft
9. 36
   CVE NVD 3h ago

   Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-113762 Microsoft
10. 36
    CVE NVD 3h ago

    Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally.

    CVSS 7.0 CVE-2026-113755 Microsoft
11. 29
    CVE NVD 3h ago

    Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

    CVSS 6.7 CVE-2026-112980 Microsoft
12. 36
    CVE NVD 3h ago

    Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-112978 Microsoft
13. 36
    CVE NVD 3h ago

    Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

    CVSS 7.0 CVE-2026-112976 Microsoft
14. 36
    CVE NVD 3h ago

    Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.

    CVSS 7.0 CVE-2026-112970 Microsoft
15. 36
    CVE NVD 3h ago

    Use after free in Windows COM allows an authorized attacker to elevate privileges locally.

    CVSS 7.0 CVE-2026-112968 Microsoft
16. 36
    CVE NVD 3h ago

    Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.

    CVSS 7.0 CVE-2026-112812 Microsoft
17. 36
    CVE NVD 3h ago

    Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.

    CVSS 7.0 CVE-2026-112798 Microsoft
18. 36
    CVE NVD 3h ago

    Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

    CVSS 7.0 CVE-2026-112797 Microsoft
19. 36
    CVE NVD 3h ago

    Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

    CVSS 7.0 CVE-2026-112792 Microsoft
20. 36
    CVE NVD 3h ago

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

    CVSS 7.0 CVE-2026-112790 Microsoft