PUB-A-180420059

In btifinhfclientgenericevt of btifhfclient.cc, there is a possible Bluetooth service crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

Microsoft Windows Bluetooth Service 权限许可和访问控制问题漏洞

Microsoft Windows Bluetooth Service is a Bluetooth driver from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Bluetooth Service due to privilege permission and access control issues. The following products and versions are affected:Windows 10 Version 1809 for 32-bit...

Google Android Buffer Overflow Vulnerability (CNVD-2021-19684)

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. A security vulnerability exists in Google Android/Pixel, which stems from a logic error in the Bluetooth service and can be exploited for spoofing attacks. The vulnerability can be exploit...

CVE-2021-21367

Switchboard Bluetooth Plug for elementary OS from version 2.3.0 and before version version 2.3.5 has an incorrect authorization vulnerability. When the Bluetooth plug is running in discoverable mode, Bluetooth service requests and pairing requests are automatically accepted, allowing physically...

Authorization

Switchboard Bluetooth Plug for elementary OS from version 2.3.0 and before version version 2.3.5 has an incorrect authorization vulnerability. When the Bluetooth plug is running in discoverable mode, Bluetooth service requests and pairing requests are automatically accepted, allowing physically...

The vulnerability of the Bluetooth service for Windows operating systems allows a perpetrator to increase their privileges and gain unauthorized access to protected information.

The vulnerability of the Bluetooth service for Windows operating systems is related to authentication errors. Exploiting this vulnerability can allow an attacker to increase their privileges and gain unauthorized access to protected information...

The vulnerability of the Bluetooth service for Windows operating systems allows a perpetrator to increase their privileges and gain unauthorized access to protected information.

The vulnerability of the Bluetooth service for Windows operating systems is related to authentication errors. Exploiting this vulnerability can allow an attacker to increase their privileges and gain unauthorized access to protected information...

Microsoft Windows Bluetooth Service Access Control Error Vulnerability

Microsoft Windows Bluetooth Service is a Bluetooth driver from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Windows Bluetooth Service. The following products and editions are affected:Windows Server 2012 R2 Server Core installation,Windows Server 2012 R2...

Microsoft Windows Bluetooth Service Security Vulnerability

Microsoft Windows Bluetooth Service is a Bluetooth driver from Microsoft. A security vulnerability exists in Microsoft Windows Bluetooth Service. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement. The following products a...

Microsoft Windows Bluetooth Service Security Vulnerability

Microsoft Windows Bluetooth Service is a Bluetooth driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Bluetooth Service. The following products and versions are affected:Windows Server, version 1909 Server Core installation,Windows 10 Version 1909 for...

CVE-2020-0379

In the Bluetooth service, there is a possible spoofing attack due to a logic error. This could lead to remote information disclosure of sensitive information with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8...

CVE-2020-0379

CVE-2020-0379 affects the Bluetooth service in Android 8.0–11, where a logic error enables spoofing and potential remote information disclosure without extra execution privileges. Exploitation requires user interaction. The issue is categorized as an Information Disclosure/ID within multiple Andr...

CVE-2020-0196

In RegisterNotificationResponse::GetEvent of registernotificationpacket.cc, there is a possible abort due to improper input validation. This could lead to remote denial of service of the Bluetooth service, over Bluetooth, with no additional execution privileges needed. User interaction is not...

CVE-2020-0183

In handleMessage of BluetoothManagerService, there is an incomplete reset. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-110181479...

Input validation

In RegisterNotificationResponse::GetEvent of registernotificationpacket.cc, there is a possible abort due to improper input validation. This could lead to remote denial of service of the Bluetooth service, over Bluetooth, with no additional execution privileges needed. User interaction is not...

CVE-2020-0196

CVE-2020-0196 affects Android 10 in the Bluetooth stack. In RegisterNotificationResponse::GetEvent, improper input validation can cause an abort, resulting in remote denial of service over Bluetooth with no extra privileges and no user interaction required. This is described in Android Pixel secu...

CVE-2020-1280

An elevation of privilege vulnerability exists in the way that the Windows Bluetooth Service handles objects in memory, aka 'Windows Bluetooth Service Elevation of Privilege Vulnerability'...

Privilege escalation

An elevation of privilege vulnerability exists in the way that the Windows Bluetooth Service handles objects in memory, aka 'Windows Bluetooth Service Elevation of Privilege Vulnerability'...

CVE-2020-1280

CVE-2020-1280 is an elevation of privilege vulnerability in Windows Bluetooth Service where memory objects are mishandled. The CVE is documented in NVD as a local, user-initiated issue with potential high impact if exploited, though exploitation details or root-cause specifics are not provided in...

CVE-2020-1280

An elevation of privilege vulnerability exists in the way that the Windows Bluetooth Service handles objects in memory, aka 'Windows Bluetooth Service Elevation of Privilege Vulnerability'...