CVE-2026-83838

The Windows Bluetooth A2DP driver is vulnerable to an integer underflow (wrap or wraparound) . This flaw allows an authorized attacker to achieve elevation of privilege over an adjacent network. The vulnerability is classified as HIGH severity with a CVSS 3.1 score of 8.0. No specific exploit lin...

Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability

Integer underflow wrap or wraparound in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network...

Microsoft Windows: CVE-2026-83838: Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability

Integer underflow wrap or wraparound in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network...

EUVD-2026-73997

In a2dpvendoropusdecoderdecodepacket of a2dpvendoropusdecoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-16473

A flaw was found in the sbc library BlueZ SBC codec. An off-by-one error in the SBC frame decoder allows a crafted audio payload to trigger a one-byte heap out-of-bounds read. This could allow an adjacent attacker streaming Bluetooth audio to read a single byte of adjacent heap memory. Mitigation...

CVE-2023-35387: Integer Underflow (Wrap or Wraparound)

Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability...

Microsoft Windows Bluetooth A2DP driver security vulnerability

Microsoft Windows is a suite of operating systems for personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in the Microsoft Windows Bluetooth A2DP driver. An attacker could exploit the vulnerability to elevate privileges. The following products and versions...

KB5029263: Windows 11 version 22H2 Security Update (August 2023)

The remote Windows host is missing security update 5029263. It is, therefore, affected by multiple vulnerabilities - Microsoft Message Queuing Remote Code Execution Vulnerability CVE-2023-35385, CVE-2023-36910, CVE-2023-36911 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution...

KB5029308: Windows Server 2012 Security Update (August 2023)

The remote Windows host is missing security update 5029308. It is, therefore, affected by multiple vulnerabilities - Microsoft Message Queuing Remote Code Execution Vulnerability CVE-2023-35385, CVE-2023-36910, CVE-2023-36911 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution...

Google Android 安全漏洞

An elevation of privilege vulnerability exists in Google Android, a Linux-based open source operating system from Google, Inc. The vulnerability stems from a lack of privilege checking in the broadcast definition of AndroidManifest.xml, which could potentially set the A2DP Bluetooth device...