🟠 High | Source: Microsoft Security Response Center
CVE-2026-58538 is an elevation of privilege vulnerability in the Windows Bluetooth Service, meaning a local attacker could potentially gain higher system privileges by exploiting a flaw in Bluetooth handling. Microsoft has issued an update to this advisory, though the change is purely administrative — an acknowledgement was added with no modification to the underlying vulnerability details or patch guidance. No immediate action is required as a result of this specific update.
Security Architect’s Take: No new technical risk has been introduced by this advisory update; however, ensure that any Windows endpoints or Azure-connected virtual machines running Windows with Bluetooth services enabled have already applied the relevant patch from the original advisory. Review your VM and endpoint patch compliance dashboards to confirm coverage.
Original advisory: CVE-2026-58538 Windows Bluetooth Service Elevation of Privilege Vulnerability