CVE-2026-83739

7.5High

Published 13 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash

7.5High

Attack vector: Adjacent network
Complexity: High
Privileges needed: None
User interaction: None
Impact: Full C/I/A compromise
Weakness: CWE-416

Impact

Unauthenticated attackers within adjacent radio range can execute arbitrary code on the target system. They only need to be within Bluetooth range without requiring prior credentials or user interaction.

Root cause

A use-after-free vulnerability exists in the Windows Bluetooth Service handling routine.

Affected systems

Versions not listed — check the vendor advisory.

CVSS v3.1 · CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Fix & remediation

Apply the vendor security update from Microsoft. If patching must wait, disable the Bluetooth service (bthserv) or turn off Bluetooth radios on vulnerable endpoints.

shell

$ powershell.exe -Command "Stop-Service bthserv -PassThru; Set-Service bthserv -StartupType Disabled"

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83739

Source: nvd.nist.gov/vuln/detail/CVE-2026-83739