CVE-2025-53802

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2025-53802 Windows Bluetooth Service Elevation of Privilege Vulnerability

...

CVE-2025-53802

Technical details about CVE-2025-53802 (affected components, root cause, versions, exploitability, and fixes) are not publicly provided in the supplied connected documents. Monitor for updates from Microsoft advisories and MSRC for remediation specifics.

CVE-2025-53802 Windows Bluetooth Service Elevation of Privilege Vulnerability

...

Windows Bluetooth Service Elevation of Privilege Vulnerability

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

PT-2025-36825

Name of the Vulnerable Software and Affected Versions: Windows Bluetooth Service affected versions not specified Description: A use-after-free issue exists in the Windows Bluetooth Service that could allow an authorized attacker to gain elevated privileges locally. This issue allows attackers to...

Microsoft Windows Bluetooth Service 资源管理错误漏洞

Microsoft Windows Bluetooth Service is a Bluetooth driver from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Bluetooth Service. An attacker could exploit this vulnerability to elevate privileges. The following products and editions are...

CVE-2024-6444

No proper validation of the length of user input in olcpindhandler in zephyr/subsys/bluetooth/services/ots/otsclient.c...

CVE-2023-32891

In bluetooth service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07933038; Issue ID: MSV-559...

CVE-2023-40088

In callbackthreadevent of comandroidbluetoothbtserviceAdapterService.cpp, there is a possible memory corruption due to a use after free. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-33901

In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-33902

In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-32825

In bluethooth service, there is a possible out of bounds reads due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07884130; Issue ID: ALPS07884130...

CVE-2022-48450

In bluetooth service, there is a possible missing params check. This could lead to local denial of service with System execution privileges needed...

CVE-2022-48451

In bluetooth service, there is a possible out of bounds write due to race condition. This could lead to local denial of service with System execution privileges needed...

CVE-2022-20045

In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126820; Issue ID: ALPS06126820...

CVE-2021-1022

In btifinhfclientgenericevt of btifhfclient.cc, there is a possible Bluetooth service crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-1280

An elevation of privilege vulnerability exists in the way that the Windows Bluetooth Service handles objects in memory, aka 'Windows Bluetooth Service Elevation of Privilege Vulnerability'...

CVE-2020-0379

In the Bluetooth service, there is a possible spoofing attack due to a logic error. This could lead to remote information disclosure of sensitive information with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8...

CVE-2011-4276

The Bluetooth service com/android/phone/BluetoothHeadsetService.java in Android 2.3 before 2.3.6 allows remote attackers within Bluetooth range to obtain contact data via an AT phonebook transfer...