Anyone else fed up with how long Microsoft takes to ship proprietary driver updates for the Surface?
I've got a Surface Pro 11 with a Snapdragon X Plus, and the latest Wi-Fi driver is still 1.0.4374.1300, updated in July 2025. Since Qualcomm doesn't push updates directly, we're stuck waiting on Microsoft. In the meantime, several CVEs have been disclosed that affect the current driver version:
- CVE-2026-21367 (7.6, high): out-of-bounds read (CWE-126) in the WLAN firmware. Reached when handling non-standard FILS Discovery frames whose action sizes fall outside the expected range during an initial scan.
- CVE-2026-21381 (7.6, high): out-of-bounds read (CWE-126) in the WLAN firmware. Surfaces on receipt of a service data frame with excessive length during the device matching phase of a NAN connection.
- CVE-2025-47401 (6.5, medium): out-of-bounds read (CWE-126) in the WLAN HAL. Arises while processing target power rate tables during channel configuration.
- CVE-2025-47403 (6.5, medium): out-of-bounds read (CWE-126) in the WLAN firmware. Triggered by a Fast Transition (IEEE 802.11r) response frame with a malformed header structure during roaming.
- CVE-2026-25266 (5.5, medium): exposed dangerous function (CWE-749) in the Windows WLAN host. Reached through an IOCTL command issued while the device sits in power-save state.
- CVE-2026-25288 (7.4, high): out-of-bounds read (CWE-126) in the WLAN firmware. Hit when parsing a Target Wake Time channel usage response frame with insufficient packet size.
- CVE-2026-25289 (9.6, critical): stack-based buffer overflow (CWE-121) in the WLAN firmware. Triggered while parsing Device Capability Extended attributes in NAN Service Discovery frames carrying invalid length fields.