CVE-2026-69388: Windows Bluetooth Service Elevation of Privilege Vulnerability

Published Sep 8, 2026

Updated

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

Other sources

Windows Bluetooth Service Elevation of Privilege Vulnerability

— Microsoft

Affected Software

1 affected component

Microsoft Windows Bluetooth Service

Event History

Sep 8, 2026

CVE Published

via Microsoft·02:00 PM

Data Sourced

via Microsoft·02:00 PM

DescriptionSeverityWeakness

CVE Published

via MITRE·05:15 PM

Data Sourced

via MITRE·05:15 PM

DescriptionSeverity

Data Sourced

via NVD·06:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attacker must already be authorized on the affected Windows system and exploit the issue locally. The available data does not indicate that remote exploitation is possible.

What is the likely impact if exploitation succeeds?

Successful exploitation can elevate the attacker's privileges. The supplied vector indicates high impact to confidentiality, integrity, and availability.

CVE-2026-69388: Windows Bluetooth Service Elevation of Privilege Vulnerability

Other sources

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the likely impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the likely impact if exploitation succeeds?