EUVD-2026-73488
GHSA-cp6h-wxv7-jvfp
Severity by source
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Local vector and high complexity reflect race condition timing requirement; PR:L reflects need for an existing authenticated foothold; full CIA impact reflects SYSTEM-level privilege gain.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
4DescriptionCVE.org
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
AnalysisAI
Privilege escalation in the Windows Bluetooth Service enables a locally authenticated low-privileged user to gain SYSTEM-level access across a wide range of Windows 10, Windows 11, and Windows Server versions. The root cause is a race condition (CWE-362) in shared resource handling within the Bluetooth service, where competing threads can exploit an unsynchronized access window to trigger a privileged operation in the attacker's context. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an existing authenticated low-privileged local account or code execution context on the target system (PR:L per CVSS vector) - unauthenticated remote attackers cannot directly exploit this vulnerability. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.0 score accurately reflects a constrained but consequential attack profile. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft security update for the applicable Windows version, advancing affected builds to the patched thresholds confirmed in the EUVD data: Windows 10 21H2/22H2 to 10.0.19044.7725/10.0.19045.7725, Windows 11 23H2 to 10.0.22631.7582, Windows 11 24H2 to 10.0.26100.9445, Windows 11 25H2 to 10.0.26200.9445, Windows 11 26H1 to 10.0.28000.2954, Windows Server 2019 to 10.0.17763.9245, Windows Server 2022 to 10.0.20348.5622, and Windows Server 2025 to 10.0.26100.33438. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all Windows 10, Windows 11, and Windows Server systems in your environment and prioritize those with direct user access. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-362 – Race Condition
View allSame technique Race Condition
View allShare
External POC / Exploit Code
Leaving vuln.today