{"id":"CVE-2026-83777","published":"2026-10-13T19:20:26.400","lastModified":"2026-10-16T16:21:30.730","description":"Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83777","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Windows Bluetooth Service allows unauthorized attackers on an adjacent network to elevate privileges, potentially gaining full control over affected systems. This vulnerability arises from improper bounds checking when handling Bluetooth data structures.","exploitability":"Exploitation requires an attacker to be on the same network segment as a target system, making it moderately difficult but achievable through network reconnaissance and packet injection techniques.","blast_radius":"If exploited, this vulnerability could allow attackers to gain SYSTEM-level privileges on any Windows system running the Bluetooth service, potentially affecting entire corporate networks with multiple vulnerable devices.","remediation":"Apply the latest Windows updates including KB5042819 or later, which contain the patched version of the Bluetooth service component that resolves this heap overflow vulnerability.","detection":"Monitor for unusual Bluetooth service process behavior in Windows Event Logs, particularly Event ID 4624 (successful logon) and Event ID 4670 (permissions change) where elevated privileges appear without user interaction, and look for unexpected network traffic to Bluetooth service ports (typically TCP 1024-1025).","tags":["privilege-escalation","bluetooth","windows-service"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:59:00.565Z"}}