Microsoft Windows Bluetooth Service Privilege Escalation Vulnerability

A use-after-free vulnerability has been identified in the Windows Bluetooth Service, allowing an authorized attacker to locally elevate privileges. This vulnerability affects multiple Windows versions, including various releases of Windows 10, Windows 11, Windows Server 2016, 2019, 2022, and 2025. The vulnerability arises from improper memory management, which can be exploited to gain elevated privileges, potentially allowing attackers to perform actions beyond their normal rights.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing attackers to gain elevated rights and perform actions that are normally restricted.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. This security update is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5094122, KB5094123, KB5094125, KB5094126, and KB5095051.