CVE-2023-23388: high-severity vulnerability in Microsoft Windows 10 Version 1607
Windows Bluetooth Driver Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A flaw in Windows Bluetooth Driver allows a local attacker to gain elevated privileges on the system. By exploiting this vulnerability, an attacker with basic user access can escalate their permissions to administrator level.
The vulnerability exists in the Windows Bluetooth Driver's handling of numeric conversion (CWE-681), allowing local authenticated attackers to trigger an elevation of privilege condition. The attack requires local access and no interaction from other users; successful exploitation grants SYSTEM-level privileges.
In the same product, most dangerous first.