CVE-2023-23388

此仓库包含 CVE-2023-23388 的 PoC，该漏洞在此系列文章中描述，特别是在这篇帖子中。它是 Windows 10/11 中蓝牙服务（也称为 bthserv ）的一个本地权限提升漏洞，允许非特权用户提升至 LOCAL SERVICE 权限。此仓库不包含漏洞利用程序，仅包含 PoC。 构建与运行 请使用虚拟机。这可能包含病毒。 微软在2023年3月的安全更新中修复了该漏洞，因此你需要针对未应用该更新的系统进行测试。你也可以在测试时对补丁进行临时修补，阅读那篇文章后应该不难做到。系统还需要开启蓝牙，否则服务可能不会运行或可能丢弃 RPC 请求。要编译 PoC，请在 VS 2022...

CVE-2017-0781

CVE-2017-0781 PoC 概述 这是 Armis 发布的 Blueborne 白皮书中描述的 CVE-2017-0781 Android 堆溢出漏洞的实现。进一步阅读：https://www.armis.com/blueborne/ 在当前状态下，此代码仅演示了溢出和使蓝牙服务崩溃的能力。再次强调，这不是一个完整的远程代码执行，但它可以发展成那样。 说明 获取 pwntools。 root@kitploit: apt-get update apt-get install python2.7 python-pip python-dev git libssl-dev...

CVE-2026-69889

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69448

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69398

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69388

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69398

CVE-2026-69398 is a local privilege escalation vulnerability in the Windows Bluetooth Service , caused by a race condition (concurrent execution using a shared resource with improper synchronization). An authorized local attacker with low privileges can exploit this to gain high confidentiality, ...

EUVD-2026-73488

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73484

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69388

CVE-2026-69388 is a use-after-free vulnerability in Windows Bluetooth Service that allows a local attacker with low privileges to elevate privileges . The attack requires local access and is characterized by high complexity , with no user interaction needed. The CVSS 3.1 base score is 7.0 (HIGH) ...

EUVD-2026-73046

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69889

CVE-2026-69889 is a use-after-free vulnerability in the Windows Bluetooth Service that allows an authorized attacker to elevate privileges locally . The CVSS v3.1 base score is 7.0 (HIGH) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , indicating a local attack requiring low privileges, ...

CVE-2026-69448

CVE-2026-69448 is a local privilege escalation vulnerability in the Windows Bluetooth Service , caused by a race condition due to concurrent execution using a shared resource with improper synchronization. An authorized attacker can exploit this to elevate privileges locally, with a CVSS 3.1 scor...

EUVD-2026-72974

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

Windows Bluetooth Service Elevation of Privilege Vulnerability

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

Windows Bluetooth Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

Windows Bluetooth Service Elevation of Privilege Vulnerability

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

Windows Bluetooth Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2026-58538

Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2026-58538

CVE-2026-58538 describes a heap-based buffer overflow in the Windows Bluetooth Service that enables an authorized, local attacker to elevate privileges. The vulnerability is evidenced in multiple sources (NVD/NCSC/CIRCL) with consistent wording: heap-based overflow in the Bluetooth service leads ...