← Back to CVE search

CVE-2026-0097

Bluetooth

Description

In multiple locations, there is a possible way to bypass user interaction when pairing an LE device due to a logic error. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS 8EPSS 0.121%Risk 0.81
View source
Published
2026-06-01 22:16:23
Affected versions
unknown
Type
Core software
Last modified
2026-07-22 17:10:00
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H