Summary
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
How could an attacker exploit this vulnerability?
An authorized attacker could exploit the Windows Bluetooth driver vulnerability by programmatically running certain functions that could lead to elevation of privilege on the Bluetooth component.
Security updates
10.0.17763.2114 — https://support.microsoft.com/help/5005030
10.0.18363.1734 — https://support.microsoft.com/help/5005031
10.0.19043.1165 — https://support.microsoft.com/help/5005033
10.0.10240.19022 — https://support.microsoft.com/help/5005040
10.0.14393.4583 — https://support.microsoft.com/help/5005043
6.1.7601.25685 — https://support.microsoft.com/help/5005088
6.1.7601.25685 — https://support.microsoft.com/help/5005089
6.3.9600.20094 — https://support.microsoft.com/help/5005076
6.3.9600.20094 — https://support.microsoft.com/help/5005106
Vulnerabilities 1
-
High 7.8
Windows Bluetooth Driver Elevation of Privilege Vulnerability
Windows Bluetooth Driver Elevation of Privilege Vulnerability
Revision history
-
#1
Information published.
References
-
CVE-2021-34537 Windows Bluetooth Driver Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34537
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss