PatchSiren cyber security CVE debrief
CVE-2026-45605 Microsoft CVE debrief
CVE-2026-45605 is a use-after-free vulnerability in the Windows Bluetooth Service. An authorized attacker can exploit this vulnerability locally to elevate privileges. The vulnerability has a CVSS score of 7.8 and is classified as HIGH severity.
- Vendor
- Microsoft
- Product
- Windows 10 Version 1607
- CVSS
- HIGH 7.8
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-06-09
- Original CVE updated
- 2026-06-11
- Advisory published
- 2026-06-09
- Advisory updated
- 2026-06-11
Who should care
Administrators and users of Windows operating systems should be aware of this vulnerability and take necessary actions to mitigate it.
Technical summary
The vulnerability is caused by a use-after-free error in the Windows Bluetooth Service. This allows an authorized attacker to exploit the vulnerability locally and elevate privileges.
Defensive priority
High
Recommended defensive actions
- Apply patches from Microsoft as soon as possible.
- Refer to https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45605 for vendor advisory and mitigation guidance.
Evidence notes
The vulnerability is confirmed by Microsoft and has been documented in the CVE record.
Official resources
-
CVE-2026-45605 CVE record
CVE.org
-
CVE-2026-45605 NVD detail
NVD
-
Source item URL
nvd_modified
-
Mitigation or vendor reference
[email protected] - Vendor Advisory
CVE-2026-45605 was published on 2026-06-09T17:17:29.227Z and modified on 2026-06-11T18:39:58.917Z.