CVE-2026-68849: Out-of-bounds Read

Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally...

CVE-2026-69817: Use After Free

Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally...

ROS-20260908-73-0082

The vulnerability of Google Chrome and Microsoft Edge web browsers’ Bluetooth components stems from the absence of a mechanism for verifying input data on the server side. Exploiting this vulnerability allows an attacker to bypass the sandboxing protection mechanisms...

ROS-20260908-73-0078

The vulnerability of the Bluetooth component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created HTML page...

PT-2026-87772

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

PT-2026-87435

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

PT-2026-87072

An issue in the l2cap handle data function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...

CVE-2026-79376

An issue in the l2caphandledata function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...

CVE-2026-79377

A heap overflow in the a2dpdecodersbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...

EUVD-2026-72776

An issue in the l2caphandledata function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...

ALSA-2026:65334 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation CVE-2026-43133 kernel: Bluetooth: SMP: force responder MITM requirements before building the pairing response CVE-2026-43334 kernel...

PT-2026-87425

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

PT-2026-87476

Name of the Vulnerable Software and Affected Versions Windows Bluetooth Service affected versions not specified Description A race condition occurs in the Windows Bluetooth Service due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileg...

CVE-2026-79378

An issue in the btmaclhandle function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...

CVE-2026-79379

A buffer overflow in the SBCDecodeFrames function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier and fixed in v.5.0 allows attackers to cause a Denial of Service DoS via sending a crafted frame...

CVE-2026-79379: Reachable Assertion

A buffer overflow in the SBCDecodeFrames function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier and fixed in v.5.0 allows attackers to cause a Denial of Service DoS via sending a crafted frame...

PT-2026-87075

Name of the Vulnerable Software and Affected Versions Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware versions prior to 5.0 Description A buffer overflow occurs in the SBC DecodeFrames function. This issue allows attackers to cause a Denial of Service DoS by sending a crafted frame. A...

EUVD-2026-72779

A buffer overflow in the SBCDecodeFrames function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier and fixed in v.5.0 allows attackers to cause a Denial of Service DoS via sending a crafted frame...

PT-2026-87286

Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally...

CVE-2026-79376

The Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC is affected by a vulnerability in the l2cap_handle_data() function. The flaw allows an attacker to trigger a Denial of Service (DoS) by sending a crafted L2CAP packet . This issue impacts firmware v3.x and earlier . No specific remediation or ex...