Skip to content
OpenAdvisories
High MSRC-CVE-2022-35820 1 CVE

Windows Bluetooth Driver Elevation of Privilege Vulnerability

Published Aug 9, 2022 · Updated Aug 19, 2022 · Revision 2

Vendor: Microsoft

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

Details

What privileges could be gained by an attacker who successfully exploited the vulnerability?
An authorized local attacker could exploit this Windows Bluetooth driver vulnerability by programmatically running certain functions to arbitrarily gain registry key creation and deletion in the bthport.sys driver.

Security updates
10.0.17763.3287 — https://support.microsoft.com/help/5016623
10.0.19043.1889 — https://support.microsoft.com/help/5016616
10.0.20348.887 — https://support.microsoft.com/help/5016627
10.0.22000.856 — https://support.microsoft.com/help/5016629
10.0.10240.19387 — https://support.microsoft.com/help/5016639
10.0.14393.5291 — https://support.microsoft.com/help/5016622
6.1.7601.26065 — https://support.microsoft.com/help/5016676
6.1.7601.26065 — https://support.microsoft.com/help/5016679
6.3.9600.20520 — https://support.microsoft.com/help/5016681
6.3.9600.20520 — https://support.microsoft.com/help/5016683
6.2.9200.23817 — https://support.microsoft.com/help/5016672
6.2.9200.23817 — https://support.microsoft.com/help/5016684

Vulnerabilities 1

Revision history

  1. #2

    Corrected Download and Article links for affected versions of Windows 10 Version 1607, Windows Server 2016, Windows 10 Version 1809, and Windows Server 2019 in the Security Updates table. This is an informational change only.

  2. #1

    Information published.

References