CVE-2023-21554: Windows Bluetooth RCE
Summary
Windows Bluetooth stack allows remote code execution via crafted Bluetooth packets (Blindside).
Why It Matters
HIGH severity with CVSS 8.8 ；affects Microsoft Windows 10 21H2, Windows 10 22H2, Windows 11 21H2 and more.
Current Status
- Vulnerability status: Not listed in CISA KEV
- Last intelligence update: 2026-10-27 · source: NVD
Entity Activity Timeline
- 2023-02-14 — NVD publication / disclosure
- 2026-10-27 — Intelligence record updated（NVD sync）
Severity
HIGH
CVSS Score: 8.8
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source Attribution
Source: NVD · Updated: 2026-10-27T00:00:00.000 · Confidence: high
Impact
Based on CVSS vector: AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H — assess confidentiality, integrity, and availability impact via the official vector documentation.
Affected Software
- Microsoft Windows 10 21H2 (Unknown)
- Windows 10 22H2 (Unknown)
- Windows 11 21H2 (Unknown)
- Windows 11 22H2 (Unknown)
Fix
Upgrade affected software to the fixed version identified above. Apply vendor patches and monitor advisories before exposed systems go unpatched.
Sources & Evidence
Export threat intelligence
Download an OASIS STIX 2.1 threat-intelligence bundle (JSON) for MISP / OpenCTI / TAXII import
Start Investigation
Move from reading to investigating CVE-2023-21554: Windows Bluetooth RCE. The workspace is a structured analysis surface — not a chat — organised as:
- Question — what do you need to know about CVE-2023-21554: Windows Bluetooth RCE?
- Evidence — assertions mapped to verifiable references.
- Timeline — events in chronological order.
- Related Entities — CVE, threat actor, campaign, malware links.
- Sources — NVD, CISA KEV, MITRE ATT&CK, vendor advisories.
- Notes — your own observations and working hypotheses.
AI assistance is limited to summarising, explaining, and suggesting related evidence. AI never completes your investigation, modifies entity relationships, or generates facts — all published analysis stays human-reviewed.
Recommended Tools
- CVE Lookup Open the full CVE record — severity, CVSS, affected products, CISA KEV and references. Open CVE record
Every tool runs passively or locally — inputs are never stored and no target is scanned. Start an investigation on this entity →