PT-2026-112570

Name of the Vulnerable Software and Affected Versions Microsoft Bluetooth Driver affected versions not specified Description An out-of-bounds read occurs in the Microsoft Bluetooth Driver, which allows an unauthorized attacker to elevate privileges through a physical attack. An out-of-bounds read...

ROS-20261013-73-0210

The vulnerability of the hciuartregisterdev function in the drivers/bluetooth/hcildisc.c device driver of the Linux operating system’s Bluetooth driver is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise...

CVE-2026-19939: Expired Pointer Dereference

The AVDTP signalling layer arms a 6-second command timeout AVDTPTIMEOUT in avdtpsendcmd whenever the local device issues an AVDTP request. Every response handler in subsys/bluetooth/host/classic/avdtp.c cancels session-timeoutwork before clearing the pending request, but btavdtpl2capdisconnected...

CVE-2026-83760: Out-of-bounds Read

Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83868: Microsoft Bluetooth Driver Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83827: Windows Bluetooth Port Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83760: Microsoft Bluetooth Driver Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally...

CVE-2026-83776: Out-of-bounds Read

Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-83739: Use After Free

Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-83827: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-70126: Out-of-bounds Read

Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-83868: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally...

PT-2026-112633

Name of the Vulnerable Software and Affected Versions Microsoft Bluetooth Driver affected versions not specified Description A race condition exists in the Microsoft Bluetooth Driver. This occurs when concurrent execution using a shared resource lacks proper synchronization, allowing an authorize...

PT-2026-112594

Name of the Vulnerable Software and Affected Versions Windows Bluetooth Port Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Bluetooth Port Driver. This issue allows an authorized attacker to elevate privileges locally on the system. A...

CVE-2026-19940: Use After Free

The Bluetooth Classic Hands-Free Profile Audio Gateway implementation in subsys/bluetooth/host/classic/hfpag.c keeps its struct bthfpag objects in a static pool indexed by ACL connection index. On link teardown, hfpagdisconnected cancels ag-txwork and the per-call work items and then clears...

Microsoft Windows: CVE-2026-87713: Windows Bluetooth Port Driver Remote Code Execution

Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network...

PT-2026-112571

Name of the Vulnerable Software and Affected Versions Windows Bluetooth Service affected versions not specified Description A heap-based buffer overflow in the Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network. A heap-based buffer overflow...

PT-2026-112538

Name of the Vulnerable Software and Affected Versions Windows Bluetooth Service affected versions not specified Description A use after free issue in the Windows Bluetooth Service allows an unauthorized attacker to execute arbitrary code over an adjacent network, which can affect the system. Use...

Microsoft Windows: CVE-2026-83838: Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability

Integer underflow wrap or wraparound in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network...

PT-2026-112555

Name of the Vulnerable Software and Affected Versions Microsoft Bluetooth Driver affected versions not specified Description An out-of-bounds read exists in the Microsoft Bluetooth Driver, which allows an authorized attacker to disclose sensitive information locally and affect the system. An...