CVE-2026-83868
HighCVSS 7.0Summary
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could exploit the race condition to escalate privileges and take control of the system.
Recommendation
Apply Windows security updates that address this issue.
Other vulnerabilities in Microsoft Bluetooth Driver
See all- CVE-2026-96844High
An integer underflow (wrap or wraparound) in the Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network. The flaw results from improper handling of numeric values in the driver.
- CVE-2026-83776Medium
An out-of-bounds read in the Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges through a physical attack.
- CVE-2026-83760Medium
An out-of-bounds read in the Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS