Skip to content
OpenAdvisories
High MSRC-CVE-2025-59513 1 CVE

Windows Bluetooth RFCOM Protocol Driver Information Disclosure Vulnerability

Published Nov 11, 2025 · Updated Nov 11, 2025

Summary

Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H), no loss of integrity (I:N), and some loss of availability (A:L). What does that mean for this vulnerability?
An attacker who successfully exploited this use after free vulnerability could view sensitive, previously freed memory heap information (Confidentiality) since the impacted component might be divulged to the attacker.
While the attacker cannot make changes to disclosed information (Integrity), they might be able to force a crash within the function (Availability).

Security updates
10.0.17763.8027 — https://support.microsoft.com/help/5068791
10.0.20348.4405 — https://support.microsoft.com/help/5068787
10.0.20348.4346 — https://support.microsoft.com/help/5068840
10.0.19044.6575 — https://support.microsoft.com/help/5068781
10.0.26100.7171 — https://support.microsoft.com/help/5068861
10.0.26100.7092 — https://support.microsoft.com/help/5068966
10.0.22631.6199 — https://support.microsoft.com/help/5068865
10.0.25398.1965 — https://support.microsoft.com/help/5068779
10.0.14393.8594 — https://support.microsoft.com/help/5068864
6.0.6003.23624 — https://support.microsoft.com/help/5068906
6.0.6003.23624 — https://support.microsoft.com/help/5068909
6.1.7601.28021 — https://support.microsoft.com/help/5068904
6.1.7601.28021 — https://support.microsoft.com/help/5068908

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References