Advisoriesby IbisMicrosoftCVE-2026-69448
Microsoft Windows Bluetooth Service: race condition
Fix: upgrade to 10.0.19044.7725 or later (8 fixed versions below)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Windows 10 Version 21H2 Product | >= 10.0.19044.0, < 10.0.19044.7725 | 10.0.19044.7725 |
| Windows 10 Version 22H2 Product | >= 10.0.19045.0, < 10.0.19045.7725 | 10.0.19045.7725 |
| Windows 11 Version 23H2 Product | >= 10.0.22631.0, < 10.0.22631.7582 | 10.0.22631.7582 |
| Windows 11 Version 24H2 Product | >= 10.0.26100.0, < 10.0.26100.9445 | 10.0.26100.9445 |
| Windows 11 Version 25H2 Product | >= 10.0.26200.0, < 10.0.26200.9445 | 10.0.26200.9445 |
| Windows 11 version 23H2 Product | >= 10.0.22631.0, < 10.0.22631.7582 | 10.0.22631.7582 |
| Windows 11 version 26H1 Product | >= 10.0.28000.0, < 10.0.28000.2954 | 10.0.28000.2954 |
| Windows Server 2022 Product | >= 10.0.20348.0, < 10.0.20348.5622 | 10.0.20348.5622 |
| Windows Server 2025 Product | >= 10.0.26100.0, < 10.0.26100.33438 | 10.0.26100.33438 |
| Windows Server 2025 (Server Core installation) Product | >= 10.0.26100.0, < 10.0.26100.33438 | 10.0.26100.33438 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-362