CVE-2025-58728CWE-416

Windows Bluetooth Service Elevation of Privilege Vulnerability

High · published October 14, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
35.4
In the wild
Unconfirmed
What it is

⚡ A sneaky use-after-free flaw in the Windows Bluetooth Service could let attackers elevate their privileges locally! Think of it like a hotel where a guest can access the penthouse suite just because they were in the lobby at the right time — that unauthorized access can lead to some serious trouble. 🏨 In this case, an attacker with local access could effectively roam through systems like they own the place, accessing sensitive data or executing commands without proper permissions. This could lead to a catastrophic loss of data integrity or even allow full control over the affected system!

Put simply

Think of it like a hotel where a guest can access the penthouse suite just because they were in the lobby at the right time — that unauthorized access can lead to some serious trouble. 🏨 This vulnerability occurs when the Bluetooth Service improperly handles memory, allowing an authorized user to manipulate it and gain elevated privileges unexpectedly. The flaw manifests when the system fails to properly manage memory allocation, leading to potential exploitation.

What to do

In this case, an attacker with local access could effectively roam through systems like they own the place, accessing sensitive data or executing commands without proper permissions. This could lead to a catastrophic loss of data integrity or even allow full control over the affected system! To protect your systems, it's crucial to apply the latest security updates from Microsoft that directly address this vulnerability. Regularly review access permissions and user roles to limit unnecessary privileges. 🛡️ You've got this! Stay vigilant, keep your systems updated, and you'll keep those nasty attackers at bay! 🚀

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00421 · 35.4th percentile
Weakness
CWE-416 · Use After Free
Published
2025-10-14T17:00Z
EPSS history
Timeline
  • 14 OCT 17:00Z
    Windows Bluetooth Service Elevation of Privilege Vulnerability
    cvelistv5