EUVD-2026-72974
GHSA-h887-mw67-ch3r
Severity by source
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Local race condition requiring a low-privileged account and precise timing warrants AV:L/AC:H/PR:L; full C/I/A:H reflects complete escalation to SYSTEM-level control.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
4DescriptionCVE.org
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
AnalysisAI
Privilege escalation in the Windows Bluetooth Service allows a low-privileged local attacker to gain SYSTEM-level access by exploiting a race condition in shared resource handling. Affected versions span Windows 10 21H2/22H2, Windows 11 23H2 through 26H1, Windows Server 2022, and Windows Server 2025. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must hold a low-privileged local account on the target Windows system (CVSS PR:L) and be able to execute code locally (AV:L). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.0 score with AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H accurately reflects a constrained but impactful post-access escalation primitive. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply Microsoft's security update to bring affected systems to or above the patched build levels enumerated in the affected products section. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, verify current Windows versions across your environment (Windows 10 21H2/22H2, Windows 11 23H2-26H1, Server 2022/2025) and assess which systems have local users. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-362 – Race Condition
View allSame technique Race Condition
View allShare
External POC / Exploit Code
Leaving vuln.today