EUVD-2026-22071

An issue in the Bluetooth RFCOMM service of Parani M10 Motorcycle Intercom v2.1.3 allows unauthorized attackers to cause a Denial of Service DoS via supplying crafted RFCOMM frames...

CVE-2026-23750

Golioth Pouch version 0.1.0, prior to commit 1b2219a1, contains a heap-based buffer overflow in BLE GATT server certificate handling. servercertwrite allocates a heap buffer of size CONFIGPOUCHSERVERCERTMAXLEN when receiving the first fragment, then appends subsequent fragments using memcpy witho...

CVE-2018-9481

In btahdsetreportact of btahdact.cc, there is a possible out-of-bounds read due to an integer overflow. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9482

In intrdatacopycb of btifhd.cc, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation...

Microsoft Windows Bluetooth Service Resource Management Error Vulnerability

Microsoft Windows Bluetooth Service is a Bluetooth driver from Microsoft Microsoft Corporation, USA. A resource management error vulnerability exists in Microsoft Windows Bluetooth Service that stems from a contention condition due to improper synchronization of shared resources, which can be...

CVE-2025-58728

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2025-59289

Double free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2025-59290

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

EUVD-2025-34362

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

EUVD-2025-34267

Double free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

EUVD-2025-34401

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2025-59290

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2025-59289

Double free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2025-59289

Double free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2025-59290

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2025-58728

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2025-58728

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2025-59289 Windows Bluetooth Service Elevation of Privilege Vulnerability

...

CVE-2025-59289

CVE-2025-59289 concerns a double-free condition in Windows Bluetooth Service enabling a locally authenticated attacker to elevate privileges. Public sources within the provided documents confirm this CVE is associated with the Windows Bluetooth Service and is categorized with a high impact (local...

CVE-2025-59289 Windows Bluetooth Service Elevation of Privilege Vulnerability

...