CVE WatchSep 8, 2026

CVE-2026-69398

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorize

CVSS

7.0

High

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Sep 8, 2026 · Last modified: Sep 8, 2026 · CWE-362 · CWE-415

EPSS · 30d

Not enough EPSS history yet.

Technical description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

Official references

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69398

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-819507.8 HIG

—

———Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.6h CVE-2026-800808.8 HIG

—

———Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.6h CVE-2026-778947.0 HIG

—

———Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.6h CVE-2026-775048.8 HIG

—

———Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.6h CVE-2026-774939.8 CRI

—

———Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.6h CVE-2026-730057.0 HIG

—

———Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.6h