CVE-2026-42975Patch(microsoft / windows_10_1607)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch microsoft windows_10_1607 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.

1.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-122

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • windows_10_1607
  • windows_10_1809
  • windows_10_21h2
  • windows_10_22h2

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 3 mentions (2026-07-14); latest day: 1
  • 4 total mentions across 2 days

Affected systems

Vendors
Products
windows_10_1607windows_10_1809windows_10_21h2windows_10_22h2windows_11_24h2windows_11_25h2windows_11_26h1windows_server_2012windows_server_2016windows_server_2019

2 versions affected across 12 products

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-07-14: 3Mentions · 2026-07-16: 1Patch / Workaround · 2026-07-14: 2Patch / Workaround · 2026-07-16: 1Technical Details · 2026-07-14: 1Technical Details · 2026-07-16: 107-1407-16
Signal classification2 categories
Patch
375.0%
Disclosure
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-07-143
Disclosure1Patch2
2026-07-161
Patch1
Full discourse4 posts
  • Philip Tsukerman@PhilipTsukerman
    Patch

    Found a nice lil Windows Bluetooth vuln a while ago, and now it's fixed! https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42975

    Post summary

    The post announces that a previously identified Windows Bluetooth vulnerability (CVE-2026-42975) has been addressed and fixed by Microsoft, as evidenced by the update link.

    00061682
    3.4K followersView on X
  • STEALIEN@stealien
    Patch

    스틸리언, Microsoft 취약점 발견 https://blog.naver.com/stealien_official/224348505343 #스틸리언 #사이버보안 #Microsoft #CVE #취약점연구 스틸리언 박현 연구원이 제보한 Windows Bluetooth 포트 드라이버 원격 코드 실행 취약점(CVE-2026-42975)이 Microsoft 보안 업데이트를 통해 공개되었습니다. CVE-2026-42975 / CVSS 8.0 HIGH / Windows Bluetooth 스틸리언은 지속적인 보안 연구와 책임 있는 취약점 제보를 통해 안전한 소프트웨어 생태계 조성에 기여하고 있습니다👽

    Post summary

    The post reports the discovery of a Windows Bluetooth RCE vulnerability (CVE‑2026‑42975) and notes that Microsoft has addressed it via a security update, highlighting the availability of a patch.

    01020258
    518 followersView on X
  • Windows Forum@windowsforum
    Patch

    🪟 Bluetooth isn’t just for headphones: CVE-2026-42975 could enable remote code execution from nearby. Install July’s updates before “pairing” becomes “pwned.” https://windowsforum.com/threads/cve-2026-42975-patch-windows-bluetooth-rce-in-july-14-updates.438144/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #WindowsSecurity #BluetoothVulnerability #Cve202642975 #MicrosoftPatches https://t.co/WZy9QE05KV

    Post summary

    The post warns of a Bluetooth RCE (CVE-2026-42975) and urges installing July updates to patch the flaw.

    0000041
    1.2K followersView on X
  • VulDB 🛡@vuldb
    Disclosure

    The severity is increased for this new vulnerability affecting Microsoft Windows (CVE-2026-42975) https://vuldb.com/vuln/378414

    Post summary

    The brief notice announces that the newly discovered CVE-2026-42975 against Microsoft Windows has an increased severity, but offers no further technical, exploit, or mitigation details.

    00000112
    2.3K followersView on X
CPE platform detail22 entries

22 of 22 entries

PartVendorProductVersionTarget SWTarget HW
OSmicrosoftwindows_10_1607--x64
OSmicrosoftwindows_10_1607--x86
OSmicrosoftwindows_10_1809--x64
OSmicrosoftwindows_10_1809--x86
OSmicrosoftwindows_10_21h2--arm64
OSmicrosoftwindows_10_21h2--x64
OSmicrosoftwindows_10_21h2--x86
OSmicrosoftwindows_10_22h2--arm64
OSmicrosoftwindows_10_22h2--x64
OSmicrosoftwindows_10_22h2--x86
OSmicrosoftwindows_11_24h2--arm64
OSmicrosoftwindows_11_24h2--x64
OSmicrosoftwindows_11_25h2--arm64
OSmicrosoftwindows_11_25h2--x64
OSmicrosoftwindows_11_26h1--arm64
OSmicrosoftwindows_11_26h1--x64
OSmicrosoftwindows_server_2012---
OSmicrosoftwindows_server_2012r2--
OSmicrosoftwindows_server_2016--x64
OSmicrosoftwindows_server_2019--x64
OSmicrosoftwindows_server_2022--x64
OSmicrosoftwindows_server_2025--x64

Explore more