Advisoriesby IbisMicrosoftCVE-2026-83838
Microsoft Windows: integer overflow
Fix: upgrade to 10.0.14393.9612 or later (9 fixed versions below)
Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Windows 10 Version 1607 Product | >= 10.0.14393.0, < 10.0.14393.9612 | 10.0.14393.9612 |
| Windows 10 Version 1809 Product | >= 10.0.17763.0, < 10.0.17763.9376 | 10.0.17763.9376 |
| Windows 10 Version 21H2 Product | >= 10.0.19044.0, < 10.0.19044.7807 | 10.0.19044.7807 |
| Windows 10 Version 22H2 Product | >= 10.0.19045.0, < 10.0.19045.7807 | 10.0.19045.7807 |
| Windows 11 Version 23H2 Product | >= 10.0.22631.0, < 10.0.22631.7652 | 10.0.22631.7652 |
| Windows 11 Version 24H2 Product | >= 10.0.26100.0, < 10.0.26100.9711 | 10.0.26100.9711 |
| Windows 11 Version 25H2 Product | >= 10.0.26200.0, < 10.0.26200.9711 | 10.0.26200.9711 |
| Windows 11 Version 26H2 Product | >= 10.0.26300.0, < 10.0.26300.9711 | 10.0.26300.9711 |
| Windows 11 version 23H2 Product | >= 10.0.22631.0, < 10.0.22631.7652 | 10.0.22631.7652 |
| Windows 11 version 26H1 Product | >= 10.0.28000.0, < 10.0.28000.3231 | 10.0.28000.3231 |
| Windows Server 2016 Product | >= 10.0.14393.0, < 10.0.14393.9612 | 10.0.14393.9612 |
| Windows Server 2016 (Server Core installation) Product | >= 10.0.14393.0, < 10.0.14393.9612 | 10.0.14393.9612 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-191