CVE-2023-23388

此仓库包含 CVE-2023-23388 的 PoC，该漏洞在此系列文章中描述，特别是在这篇帖子中。它是 Windows 10/11 中蓝牙服务（也称为 bthserv ）的一个本地权限提升漏洞，允许非特权用户提升至 LOCAL SERVICE 权限。此仓库不包含漏洞利用程序，仅包含 PoC。 构建与运行 请使用虚拟机。这可能包含病毒。 微软在2023年3月的安全更新中修复了该漏洞，因此你需要针对未应用该更新的系统进行测试。你也可以在测试时对补丁进行临时修补，阅读那篇文章后应该不难做到。系统还需要开启蓝牙，否则服务可能不会运行或可能丢弃 RPC 请求。要编译 PoC，请在 VS 2022...

CVE-2017-0781

CVE-2017-0781 PoC 概述 这是 Armis 发布的 Blueborne 白皮书中描述的 CVE-2017-0781 Android 堆溢出漏洞的实现。进一步阅读：https://www.armis.com/blueborne/ 在当前状态下，此代码仅演示了溢出和使蓝牙服务崩溃的能力。再次强调，这不是一个完整的远程代码执行，但它可以发展成那样。 说明 获取 pwntools。 root@kitploit: apt-get update apt-get install python2.7 python-pip python-dev git libssl-dev...

CVE-2026-58538

Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2026-58538

CVE-2026-58538 describes a heap-based buffer overflow in the Windows Bluetooth Service that enables an authorized, local attacker to elevate privileges. The vulnerability is evidenced in multiple sources (NVD/NCSC/CIRCL) with consistent wording: heap-based overflow in the Bluetooth service leads ...

CVE-2026-58538 Windows Bluetooth Service Elevation of Privilege Vulnerability

...

CVE-2026-58538 Windows Bluetooth Service Elevation of Privilege Vulnerability

...

Windows Bluetooth Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-35682

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2026-45605

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2026-45605

CVE-2026-45605 is a Windows Bluetooth Service use-after-free vulnerability that allows an authorized, locally located attacker to escalate privileges. The CVSS 3.1 base score is 7.8 (High) with local attack vector, low attack complexity, and no user interaction; impact includes confidentiality, i...

CVE-2026-45605 Windows Bluetooth Service Elevation of Privilege Vulnerability

...

Windows Bluetooth Service Elevation of Privilege Vulnerability

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows Bluetooth Service 资源管理错误漏洞

The Microsoft Windows Bluetooth Service is a Bluetooth driver provided by the American company Microsoft. The Microsoft Windows Bluetooth Service has a resource management vulnerability. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are...

PT-2026-47994

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows Bluetooth Service 资源管理错误漏洞

The Microsoft Windows Bluetooth Service is a Bluetooth driver provided by the American company Microsoft. The Microsoft Windows Bluetooth Service has a resource management vulnerability. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are...

EUVD-2026-22071

An issue in the Bluetooth RFCOMM service of Parani M10 Motorcycle Intercom v2.1.3 allows unauthorized attackers to cause a Denial of Service DoS via supplying crafted RFCOMM frames...

CVE-2026-23750

Golioth Pouch version 0.1.0, prior to commit 1b2219a1, contains a heap-based buffer overflow in BLE GATT server certificate handling. servercertwrite allocates a heap buffer of size CONFIGPOUCHSERVERCERTMAXLEN when receiving the first fragment, then appends subsequent fragments using memcpy witho...

CVE-2018-9481

In btahdsetreportact of btahdact.cc, there is a possible out-of-bounds read due to an integer overflow. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9482

In intrdatacopycb of btifhd.cc, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation...

Microsoft Windows Bluetooth Service Resource Management Error Vulnerability

Microsoft Windows Bluetooth Service is a Bluetooth driver from Microsoft Microsoft Corporation, USA. A resource management error vulnerability exists in Microsoft Windows Bluetooth Service that stems from a contention condition due to improper synchronization of shared resources, which can be...