CVE-2026-20456

Summary: CVE-2026-20456 affects the wlan STA driver, where a missing bounds check can cause a system crash, enabling local denial of service with user privileges. The attack is local (AV:L, PR:L) and does not require user interaction. The issue is linked to patch WCNCR00480851 (MSV-6338); no expl...

CVE-2026-20495

CVE-2026-20495 involves a Bluetooth driver with a missing permission check that enables local escalation of privilege. The vulnerability could be exploited locally with low privileges and no user interaction, potentially compromising confidentiality, integrity, and availability. The documented re...