CVE-2025-59290CWE-416

Windows Bluetooth Service Elevation of Privilege Vulnerability

High · published October 14, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
32.2
In the wild
Unconfirmed
What it is

⚡ A sneaky use-after-free flaw in Windows Bluetooth Service could let an authorized attacker level up their privileges locally—like a guest suddenly getting the master key to your hotel room! 🔑 Think of it like a hotel where a guest discovers a way to access the staff-only areas, bypassing all security protocols. Once inside, they can change reservations, access sensitive information, or even throw a wild party in the back office! 🎉 If exploited, this vulnerability could allow an attacker to gain elevated privileges on the system, enabling them to install software, modify configurations, or access sensitive data. This could lead to data breaches or complete system takeovers, making it a serious threat to your security!

Put simply

Think of it like a hotel where a guest discovers a way to access the staff-only areas, bypassing all security protocols. Once inside, they can change reservations, access sensitive information, or even throw a wild party in the back office! 🎉 The use-after-free vulnerability arises when the Bluetooth Service fails to properly manage memory, allowing unauthorized users to execute code in a privileged context, potentially leading to privilege escalation on the local machine.

What to do

If exploited, this vulnerability could allow an attacker to gain elevated privileges on the system, enabling them to install software, modify configurations, or access sensitive data. This could lead to data breaches or complete system takeovers, making it a serious threat to your security! To mitigate this risk, ensure that your Windows system is updated to the latest version. Regularly check for any patches or updates specifically targeting this vulnerability and review access controls to limit who can use the Bluetooth Service. 🛡️ You’ve got this! Stay vigilant and follow these steps to secure your system today! ✨

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00392 · 32.2th percentile
Weakness
CWE-416 · Use After Free
Published
2025-10-14T17:00Z
EPSS history
Timeline
  • 14 OCT 17:00Z
    Windows Bluetooth Service Elevation of Privilege Vulnerability
    cvelistv5