Microsoft Bluetooth Driver vulnerabilities

An integer underflow (wrap or wraparound) in the Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network. The flaw results from improper handling of numeric values in the driver.

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.

An out-of-bounds read in the Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges through a physical attack.

An out-of-bounds read in the Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.