CVE-2026-96844
HighCVSS 8.0Summary
An integer underflow (wrap or wraparound) in the Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network. The flaw results from improper handling of numeric values in the driver.
Risk Assessment
An attacker within adjacent network range could exploit this flaw to escalate privileges, potentially leading to device compromise.
Recommendation
Update the Bluetooth driver to the latest version and disable Bluetooth if it is not in use.
Other vulnerabilities in Microsoft Bluetooth Driver
See all- CVE-2026-83868High
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-83776Medium
An out-of-bounds read in the Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges through a physical attack.
- CVE-2026-83760Medium
An out-of-bounds read in the Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS