bluez bluez

Name: bluez bluez
Brand: bluez

productUS

cpe:2.3:a:bluez:bluez:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical13high20medium2low

updated 2026-10-28

vulnerabilities (37)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-24490US	medium6.5	2.22% (83rd)	Exploit	no fix	2021-02-02	—
CVE-2017-1000250US	medium6.5	7.77% (95th)	—	no fix	2017-09-12	≤ 5.46
CVE-2020-27153US	high8.6	4.32% (91st)	—	5.55	2020-10-15	< 5.55
CVE-2016-9798US	medium5.3	3.85% (90th)	—	no fix	2016-12-03	= 5.42
CVE-2016-9797US	medium5.3	3.72% (90th)	—	no fix	2016-12-03	= 5.42
CVE-2016-9802US	medium5.3	3.62% (89th)	—	no fix	2016-12-03	= 5.42
CVE-2016-9917US	high7.5	3.62% (89th)	—	no fix	2016-12-08	= 5.42
CVE-2016-9801US	medium5.3	2.96% (87th)	—	no fix	2016-12-03	= 5.42
CVE-2016-9800US	medium5.3	2.87% (87th)	—	no fix	2016-12-03	= 5.42
CVE-2016-9803US	medium5.3	2.71% (86th)	—	no fix	2016-12-03	= 5.42
CVE-2016-9804US	medium5.3	2.52% (85th)	—	no fix	2016-12-03	= 5.42
CVE-2023-50229US	high8.0	2.29% (83rd)	—	5.70	2024-05-03	5.66 → 5.70
CVE-2016-9799US	medium5.3	2.04% (81st)	—	no fix	2016-12-03	= 5.42
CVE-2024-8805US	high8.8	2.04% (81st)	—	no fix	2024-11-22	= 5.77
CVE-2022-0204US	high8.8	1.79% (78th)	—	5.63	2022-03-10	< 5.63
CVE-2021-43400US	critical9.1	1.66% (77th)	—	no fix	2021-11-04	= 5.61
CVE-2023-44431US	high8.0	1.56% (75th)	—	no fix	2024-05-03	= 5.66
CVE-2019-8922US	high8.8	1.52% (75th)	—	no fix	2021-11-29	≤ 5.48
CVE-2023-51596US	—	1.51% (74th)	—	no fix	2024-05-03	= 5.66
CVE-2023-50230US	high8.0	1.49% (74th)	—	5.70	2024-05-03	5.66 → 5.70
CVE-2023-27349US	high8.0	1.43% (73rd)	—	no fix	2024-05-03	= 5.66
CVE-2021-41229US	medium6.5	1.18% (68th)	—	no fix	2021-11-12	= 5.58
CVE-2023-51594US	medium5.7	1.08% (65th)	—	no fix	2024-05-03	= 5.66
CVE-2020-0556US	high7.1	1.04% (64th)	—	5.54	2020-03-12	< 5.54
CVE-2019-8921US	medium6.5OT elevated	1.01% (63rd)	—	no fix	2021-11-29	≤ 5.48
CVE-2023-51580US	medium5.7	0.96% (61st)	—	no fix	2024-05-03	= 5.66
CVE-2023-51589US	medium5.7	0.83% (57th)	—	no fix	2024-05-03	= 5.66
CVE-2021-0129US	medium5.7OT elevated	0.83% (57th)	—	5.57	2021-06-09	< 5.57
CVE-2023-51592US	medium5.7	0.81% (57th)	—	no fix	2024-05-03	= 5.66
CVE-2021-3658US	medium6.5OT elevated	0.79% (56th)	—	5.61	2022-03-02	< 5.61
CVE-2022-39176US	high8.8	0.75% (55th)	—	5.59	2022-09-02	< 5.59
CVE-2022-39177US	high8.8	0.71% (53rd)	—	5.59	2022-09-02	< 5.59
CVE-2016-7837US	high7.8	0.56% (46th)	—	no fix	2017-06-09	≤ 5.41
CVE-2018-10910US	low3.3OT elevated	0.46% (40th)	—	5.51	2019-01-28	< 5.51
CVE-2021-3588US	low3.3	0.45% (39th)	—	5.56	2021-06-10	< 5.56
CVE-2022-3563US	medium5.7	0.40% (34th)	—	5.65	2022-10-17	< 5.65
CVE-2022-3637US	medium5.5	0.29% (21st)	—	5.65	2022-10-21	< 5.65

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer11 CVEs
CWE-125Out-of-bounds Read8 CVEs
CWE-122Heap-based Buffer Overflow4 CVEs
CWE-416Use After Free3 CVEs
CWE-863Incorrect Authorization3 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-284Improper Access Control2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE37 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan