Product:
Windows Bluetooth Service
Summary
A double free vulnerability in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. This can lead to significant security risks as it may allow unauthorized access to sensitive system resources. The vulnerability is particularly concerning due to its high impact on confidentiality, integrity, and availability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7 | CVE-2025-59289 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system and be authorized. By manipulating the memory management of the Windows Bluetooth Service, the attacker can trigger a double free condition, which can lead to privilege escalation. This requires a high level of technical skill and knowledge of the system’s internals.
Affected Products
- Windows Bluetooth Service: Vulnerable to privilege escalation due to a double free condition.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Users should ensure that their systems are regularly updated and that any security patches are promptly installed. Additionally, limiting local access to sensitive systems can help reduce the risk of exploitation.