MSRC-CVE-2023-24944 — Windows Bluetooth Driver Information Disclosure Vulnerability

Summary

Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, the attack vector is adjacent (AV:A). What does that mean for this vulnerability?
Exploiting this vulnerability requires an attacker to be within proximity of the target system to send and receive radio transmissions.

What type of information could be disclosed by this vulnerability?
Exploiting this vulnerability could allow the disclosure of certain kernel memory content.

Security updates
10.0.17763.4377 — https://support.microsoft.com/help/5026362
10.0.20348.1726 — https://support.microsoft.com/help/5026370
10.0.20348.1724 — https://support.microsoft.com/help/5026456
10.0.19042.2965 — https://support.microsoft.com/help/5026361
10.0.22000.1936 — https://support.microsoft.com/help/5026368
10.0.22621.1702 — https://support.microsoft.com/help/5026372

Vulnerabilities 1

Medium 6.5

CVE-2023-24944

Windows Bluetooth Driver Information Disclosure Vulnerability

Windows Bluetooth Driver Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 9, 2023

Revision history

2023-05-18 #3
Updated FAQ information. This is an informational change only.
2023-05-12 #2
Added an acknowledgement. This is an informational change only.
2023-05-09 #1
Information published.

References

CVE-2023-24944 Windows Bluetooth Driver Information Disclosure Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24944
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss