Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

Windows WLAN Driver Privilege Escalation Risk through Missing Bounds Check

CVE-2026-20407 · published 9 months ago
Summary

A security issue exists in the Windows WLAN driver that could allow an attacker to gain elevated privileges on a Windows machine. This could potentially allow an attacker to take control of the system. Users should install the available patch to prevent this risk.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
mediatek nbiot_sdk <= 3.8
cpe:2.3:a:mediatek:nbiot_sdk:*:*:*:*:*:*:*:*
Original advisory text
In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interacti...
In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00464377; Issue ID: MSV-4905.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
9.3 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-787Out-of-bounds Write
Timeline
Published2 Feb 2026
Updated29 Oct 2026
First seen7 Mar 2026
Sources
CVE-2026-20407 · NVD
Track software like this
Free during beta