The vulnerability is an out-of-bounds read in the Microsoft Bluetooth driver that can be exploited to elevate privileges. By triggering a malformed Bluetooth packet an attacker who can physically approach the target system can read beyond the intended memory bounds, potentially allowing privilege escalation. This flaw (CWE-125) may enable a local attacker to obtain higher privilege level but does not inherently provide arbitrary code execution.

The issue affects a broad range of Microsoft Windows products. Clients and servers can be impacted, including Windows 10 versions 1607, 1809, 21H2, 22H2, Windows 11 versions 23H2, 24H2, 25H2, 26H2, 26H1 and Windows Server 2016, 2019, 2022, 2025. Both legacy and server-core installations are vulnerable, and support extends to x86, x64 and arm64 architectures where the driver is present.

The CVSS score of 6.8 places the flaw in the moderate‑severity range. EPSS score of < 1% indicates a very low but non‑zero likelihood of exploitation, and the vulnerability is not listed in the CISA KEV catalog. The required attack vector is physical proximity to deliver crafted Bluetooth traffic, meaning the risk is confined to environments where an attacker can feasibly contact the target device. While exploitation is possible, it does not inherently lead to widespread network compromise.