CVE-2026-98392

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintelpcie: fix txhandle bounds off-by-one Valid indices into txq-urbd0s/tfds/bufs are 0..txq-count-1, so tfdindex == txq-count is already out of range. Change the guard in btintelpciemsixtxhandle from ' txq-count' to...

Bluetooth Component DoS

The vulnerability of the Bluetooth components in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-8924-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8924-1 advisory. It was discovered that the timer stats implementation in the Linux kernel allowed the discovery of a real PID value while inside a PID namespace. A local...

USN-8908-2: BlueZ regression

USN-8908-1 fixed vulnerabilities in BlueZ. Unfortunately, that update introduced a regression in the A2DP profile: cached remote stream endpoints were no longer loaded at startup, which could cause Bluetooth audio devices to fail to reconnect automatically or to fall back to low-quality audio...

CVE-2026-96844

Integer underflow wrap or wraparound in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network...

CVE-2026-87713

Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network...

CVE-2026-83868

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-83838

Integer underflow wrap or wraparound in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network...

CVE-2026-83827

Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-83777

Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network...

CVE-2026-83776

Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-83760

Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally...

CVE-2026-83739

Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-70126

Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-96844

An integer underflow (wrap or wraparound) exists in the Microsoft Bluetooth Driver , which can be leveraged by an authorized attacker to elevate privileges over an adjacent network. The vulnerability is associated with CWE-191 . While the base severity is rated as HIGH , specific exploitation det...

CVE-2026-83777

A heap-based buffer overflow exists in the Windows Bluetooth Service . This vulnerability allows an unauthorized attacker to elevate privileges over an adjacent network. Exploitation details and specific affected versions are not provided in the documents, but the vulnerability is associated with...

CVE-2026-83739

A use after free vulnerability in the Windows Bluetooth Service allows an unauthorized attacker to achieve Remote Code Execution (RCE) over an adjacent network. The vulnerability has a CVSS 3.1 base score of 7.5. While exploitation details are not provided in the documents, the impact includes hi...

CVE-2026-87713

A Use after free vulnerability exists in the Windows Bluetooth Port Driver . This flaw allows an unauthorized attacker to elevate privileges over an adjacent network. No specific software versions or exploit details are provided in the documents. Remediation is indicated as an official fix via th...

CVE-2026-83868

A race condition exists in the Microsoft Bluetooth Driver due to improper synchronization during concurrent execution using a shared resource. This vulnerability allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (High), reflecting high impacts on conf...

CVE-2026-83838

The Windows Bluetooth A2DP driver is vulnerable to an integer underflow (wrap or wraparound) . This flaw allows an authorized attacker to achieve elevation of privilege over an adjacent network. The vulnerability is classified as HIGH severity with a CVSS 3.1 score of 8.0. No specific exploit lin...