CVE-2025-59290

CVE-2025-59290 is a high-severity use-after-free vulnerability in the Windows Bluetooth Service, affecting multiple versions of Windows 10, 11, and Server. An authenticated local attacker can exploit this flaw to achieve privilege escalation, leading to high impact on confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, the vulnerability has garnered significant community discussion and media coverage, indicating its potential for future exploitation.