Executive brief
A security vulnerability has been identified in the Windows Bluetooth Port Driver, which manages wireless connections between computers and Bluetooth devices. An attacker within Bluetooth range could exploit this flaw to take control of a system or execute malicious code without needing prior authorization. This poses a significant risk to data confidentiality and system availability for mobile and desktop users in public or shared spaces.
Technical details
This vulnerability is classified as a heap-based buffer overflow (CWE-122) within the Windows Bluetooth Port Driver. The flaw can be triggered by an unauthenticated attacker located within physical proximity (adjacent network/Bluetooth range) of the target device. While the attack requires no special privileges, the CVSS vector indicates that some level of user interaction is required. Successful exploitation allows for remote code execution with high impact on confidentiality, integrity, and availability. Microsoft has released security updates for various versions of Windows 10, Windows 11, and Windows Server 2012 to address this issue.
Affected products
- Microsoft Windows 10 Version 1607 10.0.14393.0 to 10.0.14393.9339
- Microsoft Windows 10 Version 1809 10.0.17763.0 to 10.0.17763.9020
- Microsoft Windows 10 Version 21H2 10.0.19044.0 to 10.0.19044.7548
- Microsoft Windows 10 Version 22H2 10.0.19045.0 to 10.0.19045.7548
- Microsoft Windows 11 Version 24H2 10.0.26100.0 to 10.0.26100.8875
- Microsoft Windows 11 Version 25H2 10.0.26200.0 to 10.0.26200.8875
- Microsoft Windows 11 version 26H1 10.0.28000.0 to 10.0.28000.2269
- Microsoft Windows Server 2012 6.2.9200.0 to 6.2.9200.26226
Timeline
- 2026-07-14: disclosed: Initial publication by Microsoft and NVD
- 2026-07-14: patched: Security updates released by Microsoft