Bluetooth's vulnerability profile centers on its core specification and wireless stack implementations, which define the protocol foundation for billions of connected devices across consumer, industrial, and enterprise deployments. The recurring weakness classes—authentication bypass through capture-replay attacks, improper authentication, and incorrect authorization—reflect the challenges of designing secure wireless pairing and link-layer protocols where cryptographic state and credential exchange must operate across constrained and heterogeneous devices. Defenders should treat Bluetooth protocol flaws as broadly applicable to any product implementing or relying on affected specification versions, since remediation often requires coordinated updates across chipsets, firmware, and operating systems; live severity and exploitation metrics are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Bluetooth over time
Signals from CVEs in this vendor scope (16 CVEs).
16 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2011-1265HIGH The Bluetooth Stack 2.1 in Microsoft Windows Vista SP1 and SP2 and Windows 7 Gold and SP1 does not prevent access to objects in memory that (1) were not properly initialized or (2) | Jul 13, 2011 | 8.8 | 28 | NO | NO |
CVE-2020-26559HIGH Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (participating in the provisioning protocol) to identify the AuthValue used given | May 24, 2021 | 8.8 | 26 | NO | NO |
CVE-2022-25837HIGH Bluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may permit an unauthenticated MITM to acquire credentials with two pairing devices via adjacent access when at | Dec 12, 2022 | 7.5 | 25 | NO | NO |
CVE-2022-25836HIGH Bluetooth® Low Energy Pairing in Bluetooth Core Specification v4.0 through v5.3 may permit an unauthenticated MITM to acquire credentials with two pairing devices via adjacent acce | Dec 12, 2022 | 7.5 | 25 | NO | NO |
CVE-2020-26560HIGH Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, reflecting the authentication evidence from a Provisioner, to complete authentic | May 24, 2021 | 8.1 | 24 | NO | NO |
CVE-2020-26556HIGH Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful brute-force attack on an insufficiently random AuthValue befo | May 24, 2021 | 7.5 | 24 | NO | NO |
CVE-2020-26557HIGH Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (without possession of the AuthValue used in the provisioning protocol) to determine the Au | May 24, 2021 | 7.5 | 20 | NO | NO |
CVE-2023-24023MEDIUM Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that forc | Nov 28, 2023 | 6.8 | 19 | NO | NO |
CVE-2020-26555MEDIUM Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to com | May 24, 2021 | 5.4 | 19 | NO | NO |
CVE-2020-15802MEDIUM Devices supporting Bluetooth before 5.1 may allow man-in-the-middle attacks, aka BLURtooth. Cross Transport Key Derivation in Bluetooth Core Specification v4.2 and v5.0 may permit | Sep 11, 2020 | 5.9 | 19 | NO | NO |
Signals from CVEs in this vendor scope (16 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Bluetooth.
Media articles that mention a CVE ID that affects a product developed by Bluetooth — matched by CVE ID, not by vendor name.