4635 matches found
CVE-2026-20401: Reachable Assertion
In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID...
CVE-2026-20422: Reachable Assertion
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...
CVE-2026-20405: Reachable Assertion
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...
CVE-2026-20402: Out-of-bounds Write
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...
PT-2026-5627
Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A flaw exists in Modem that could lead to a remote denial of service. This occurs due to improper input validation, potentially causing a system crash. An attacker can exploit this issue if a...
MediaTek Chipsets Security Vulnerabilities
MediaTek Chipsets are a series of chips developed by MediaTek Corporation in China. There are security vulnerabilities in MediaTek Chipsets, and these vulnerabilities stem from improper input validation in the modem component, which may lead to remote denial-of-service attacks...
Motorola SM56 Modem WDM Driver WDM Driver
The vulnerability of the Motorola SM56 Modem WDM Driver SmSerl64.sys for the Windows operating system relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to bypass existing security restrictions, elevate their...
KB5073379: Windows Server 2025 Security Update (January 2026)
The remote Windows host is missing security update 5073379. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Local Security Authority Subsystem Service LSASS allows an authorized attacker to execute code over a network. CVE-2026-20854 - An issue was discovered in...
KB5074109: Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 2025 Security Update (January 2026)
The remote Windows host is missing security update 5074109. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Local Security Authority Subsystem Service LSASS allows an authorized attacker to execute code over a network. CVE-2026-20854 - An issue was discovered in...
Agere Modem Driver Privilege Escalation
The vulnerability of the Agere Modem Driver for Windows operating systems is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain increased privileges...
CVE-2022-50935
Flame II HSPA USB Modem contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path in 'C:\Program Files x86\Internet Telcel\ApplicationController.exe' to execute arbitrary code with elevated system privileges...
CVE-2022-50935 FLAME II MODEM USB - Unquoted Service Path
Flame II HSPA USB Modem contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path in 'C:\Program Files x86\Internet Telcel\ApplicationController.exe' to execute arbitrary code with elevated system privileges...
CVE-2022-50935 FLAME II MODEM USB - Unquoted Service Path
Flame II HSPA USB Modem contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path in 'C:\Program Files x86\Internet Telcel\ApplicationController.exe' to execute arbitrary code with elevated system privileges...
CVE-2022-50935
CVE-2022-50935 affects Flame II HSPA USB Modem. The Windows service configuration contains an unquoted service path at C:\Program Files (x86)\Internet Telcel\ApplicationController.exe, enabling local attackers to execute arbitrary code with elevated privileges. CVSS metrics in the entry indicate ...
January 13, 2026âKB5073724 (OS Builds 19045.6809 and 19044.6809)
None None...
January 13, 2026âKB5073700 (Security-only update)
None None...
January 13, 2026âKB5073699 (Security-only update)
None None...
January 13, 2026âKB5073457 (OS Build 20348.4648)
None None...
January 13, 2026âKB5073450 (OS Build 25398.2092)
None None...
MITRE: CVE-2023-31096 Windows Agere Soft Modem Driver Elevation of Privilege Vulnerability
Microsoft is aware of vulnerabilities in the third party Agere Soft Modem drivers that ship natively with supported Windows operating systems. This is an announcement of the removal of agrsm64.sys and agrsm.sys drivers. The drivers have been removed in the January 2026 cumulative update. Soft mod...