24490 matches found
CVE-2026-77685
A vulnerability exists in the Bluetooth Classic RFCOMM multiplexer control-channel handler (rfcomm.c). An integer underflow occurs when processing a malformed BT_RFCOMM_TEST command: if the buf->len is 0, the calculation buf->len - 1 underflows to 255. This causes rfcomm_send_test() to perf...
CVE-2026-90832
The Zephyr RTOS Bluetooth host stack contains an out-of-bounds read in bt_hci_le_per_adv_report_common() within subsys/bluetooth/host/scan.c. The vulnerability occurs because the system fails to verify that the HCI_LE_Periodic_Advertising_Report (and _v2) event carries as many data bytes as the e...
CVE-2026-88213
Numeric truncation error in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70120
Use after free in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally...
openwifipass
OpenWifiPass An open source implementation of the grantor role in Apple's Wi-Fi Password Sharing protocol. Disclaimer OpenWifiPass is experimental software and is the result of reverse engineering efforts by the Open Wireless Link project. The code serves solely documentary and educational...
CVE-2026-44625
Use after free for some IntelR Wireless BluetoothR within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack...
CVE-2026-42956
Out-of-bounds write for some IntelR Wireless BluetoothR within Ring 0: Kernel may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack...
CVE-2026-44382
Out-of-bounds read for some IntelR Wireless BluetoothR within Ring 0: Kernel may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack...
CVE-2026-42056
Stack-based buffer overflow for some IntelR Wireless BluetoothR within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent acce...
CVE-2026-40626
Uncontrolled search path for some IntelR Wireless BluetoothR software for Windows within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This resul...
CVE-2026-40695
Null pointer dereference for some IntelR Wireless BluetoothR within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when...
EUVD-2026-121770
Integer underflow wrap or wraparound in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges over a network...
CVE-2026-95996
A vulnerability exists in the Windows Bluetooth Port Driver caused by an Integer underflow (wrap or wraparound) . This flaw allows an authorized attacker to achieve privilege elevation over a network. While the documents confirm the vulnerability's existence and the affected component, they do no...
EUVD-2026-121529
Numeric truncation error in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
CVE-2026-88213
A numeric truncation error within the Windows Bluetooth Service allows an authorized attacker to perform a local elevation of privilege . The vulnerability is associated with CWE-197 . While the provided documents confirm the presence of this flaw and its impact, specific details regarding affect...
CVE-2026-88187
A heap-based buffer overflow exists in the Windows Bluetooth A2DP driver . This vulnerability allows an authorized attacker to achieve privilege elevation over an adjacent network . Remediation for this issue is included in various Microsoft security updates, such as KB5132043 , KB5131080 , KB513...
EUVD-2026-121527
Heap-based buffer overflow in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network...
EUVD-2026-121453
Exposure of sensitive system information to an unauthorized control sphere in Windows Bluetooth Service allows an authorized attacker to disclose information locally...
CVE-2026-96001
The Windows Bluetooth Service is vulnerable to an information disclosure flaw where an authorized attacker can locally disclose sensitive system information to an unauthorized control sphere. This vulnerability is associated with CWE-497 . While the provided documents confirm the existence of the...