https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:03:42.748643+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:11154 ALSA-2024:11154 — Moderate: bluez security update 2026-10-03T08:03:42.991607+00:00

Affected: AlmaLinux:8: bluez, AlmaLinux:8: bluez-cups, AlmaLinux:8: bluez-hid2hci, AlmaLinux:8: bluez-libs, AlmaLinux:8: bluez-libs-devel, AlmaLinux:8: bluez-obexd

The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files.

Security Fix(es):

* bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution (CVE-2023-45866)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-08562 bdu:2023-08562 2026-10-03T08:03:42.991678+00:00 bdu:2023-08562 https://cve.radiocsirt.org/vuln/bell-cve-2023-45866 BELL-CVE-2023-45866 2026-10-03T08:03:42.991695+00:00

Affected: Alpaquita:23: bluez

 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0995 certfr-2023-avi-0995 — De multiples vulnérabilités ont été découvertes dans Google Android. Certaines d'entre elles permettent à un attaquant… 2026-10-03T08:03:42.991712+00:00 certfr-2023-avi-0995 https://cve.radiocsirt.org/vuln/euvd-2026-259884 EUVD-2026-259884 2026-10-03T08:03:42.991727+00:00 EUVD-2026-259884 https://cve.radiocsirt.org/vuln/fkie_cve-2023-45866 fkie_cve-2023-45866 2026-10-03T08:03:42.991737+00:00

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.

 https://cve.radiocsirt.org/vuln/ghsa-qjcj-xg77-6c32 GHSA-qjcj-xg77-6c32 2026-10-03T08:03:42.991767+00:00

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.

 https://cve.radiocsirt.org/vuln/gsd-2023-45866 gsd-2023-45866 2026-10-03T08:03:42.991784+00:00 gsd-2023-45866 https://cve.radiocsirt.org/vuln/msrc_cve-2023-45866 msrc_CVE-2023-45866 — Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encr… 2026-10-03T08:03:42.991794+00:00 msrc_CVE-2023-45866 https://cve.radiocsirt.org/vuln/oesa-2023-1948 OESA-2023-1948 — bluez security update 2026-10-03T08:03:42.991812+00:00

Affected: openEuler:20.03-LTS-SP1: bluez, openEuler:20.03-LTS-SP3: bluez, openEuler:20.03-LTS-SP4: bluez, openEuler:22.03-LTS: bluez, openEuler:22.03-LTS-SP1: bluez, openEuler:22.03-LTS-SP2: bluez

This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fix(es): Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.(CVE-2023-45866)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13507-1 openSUSE-SU-2024:13507-1 — bluez-5.70-2.1 on GA media 2026-10-03T08:03:42.991842+00:00

bluez-5.70-2.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2025:03269-1 SUSE-SU-2025:03269-1 — Security update for bluez 2026-10-03T08:03:42.991858+00:00

Security update for bluez

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-45866 UBUNTU-CVE-2023-45866 2026-10-03T08:03:42.991871+00:00

Affected: Ubuntu:Pro:16.04:LTS: bluez, Ubuntu:Pro:18.04:LTS: bluez, Ubuntu:20.04:LTS: bluez, Ubuntu:22.04:LTS: bluez, Ubuntu:24.04:LTS: bluez

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3057 WID-SEC-W-2023-3057 — Google Android: Mehrere Schwachstellen 2026-10-03T08:03:42.991894+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen.