Huawei HarmonyOS Bluetooth Character Out-of-Bounds Reading Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A character out-of-bounds read vulnerability exists in Huawei HarmonyOS Bluetooth, which can be exploited by an attacker to compromise confidentiality...

The vulnerability of the Bluetooth RFCOM Protocol Driver for Windows operating systems allows attackers to gain increased privileges.

The vulnerability of the Bluetooth RFCOM Protocol Driver for Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the btusb_hci_drv_supported_altsettings() function in the drivers/bluetooth/btusb.c module of the Linux Bluetooth device driver allows a attacker to cause a service failure.

The vulnerability of the btusbhcidrvsupportedaltsettings function in the drivers/bluetooth/btusb.c module of the Linux Bluetooth device driver framework is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel Bluetooth module, which allows a hacker to compromise data integrity

The vulnerability of the Linux operating system’s kernel Bluetooth module is related to reading data from buffer fields beyond their allowable limits. Exploiting this vulnerability allows an attacker to compromise the integrity of data...

The vulnerability of the Linux operating system’s kernel Bluetooth module allows a perpetrator to gain access to confidential data and also trigger a service failure.

The vulnerability of the Linux operating system’s kernel Bluetooth module is related to reading data from buffer files beyond the allowed limits. Exploiting this vulnerability allows an attacker to access confidential data and also cause service failures...

The vulnerability of the hci_devcd_dump() function in the net/bluetooth/coredump.c module of the Linux operating system’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hcidevcddump function in the net/bluetooth/coredump.c module of the Linux operating system’s Bluetooth subsystem is related to buffer out-of-buffer reading. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

The vulnerability of the discovery_init() function in the include/net/bluetooth/hci_core.h file of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the discoveryinit function in the include/net/bluetooth/hcicore.h file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

EUVD-2026-10593

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to elevate privileges locally...

EUVD-2026-10592

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-23671

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-23671

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-23671

CVE-2026-23671 is a Windows Bluetooth RFCOM Protocol Driver elevation of privilege vulnerability. A locally exposed issue could allow an attacker with low privileges and no user interaction to escalate privileges via the Bluetooth stack’s RFCOM Protocol Driver; exploitation maturity is UNPROVEN. ...

CVE-2026-23671

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-23671 Windows Bluetooth RFCOM Protocol Driver Elevation of Privilege Vulnerability

...

CVE-2026-23671 Windows Bluetooth RFCOM Protocol Driver Elevation of Privilege Vulnerability

...

Windows Bluetooth RFCOM Protocol Driver Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to elevate privileges locally...

PT-2026-24274

🚨 CVE-2026-23671 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

CLSA-2026-1773056241 kernel: Fix of 21 CVEs

i40e: fix IRQ freeing in i40evsirequestirqmsix error path CVE-2025-39911 - media: rc: fix races with imondisconnect CVE-2025-39993 - VMCI: fix race between vmcihostsetupnotify and vmcictxunsetnotify CVE-2025-38102 - partitions: mac: fix handling of bogus partition table CVE-2025-21772 - tracing:...

CLSA-2026-1773048865 kernel: Fix of 53 CVEs

xhci: Remove device endpoints from bandwidth list when freeing the device CVE-2022-50470 - HID: multitouch: Add NULL check in mtinputconfigured CVE-2024-58020 - netfilter: nftsetpipapo: clamp maximum map bucket size to INTMAX CVE-2025-38201 - fs: writeback: fix use-after-free in markinodedirty...

CLSA-2026-1773047921 kernel: Fix of 70 CVEs

wifi: iwlwifi: mvm: guard against invalid STA ID on removal CVE-2024-36921 - ASoC: topology: Fix references to freed memory CVE-2024-41069 - net/sched: actmirred: don't override retval if we already lost the skb CVE-2024-26739 - drivers: base: Free devm resources when unregistering a device...