Critical Race Condition Vulnerabilities in Windows Bluetooth and Kerberos

Two critical vulnerabilities (CVE-2026) have been identified in Windows systems, affecting both the Bluetooth RFCOM Protocol Driver and the Kerberos authentication protocol. The Bluetooth vulnerability allows authorized attackers to elevate privileges locally, while the Kerberos flaw enables unauthorized attackers to bypass security features over a network. Both vulnerabilities stem from improper synchronization in concurrent execution.