CVE-2026-20420

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch...

PT-2026-5625

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A flaw exists in Modem that could lead to a remote denial of service. This occurs due to improper input validation, potentially causing a system crash. An attacker could exploit this by having ...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a series of chips developed by MediaTek Corporation in China. The MediaTek Chipsets contain security vulnerabilities; these vulnerabilities stem from the lack of boundary checking in the modem component, which may lead to remote denial-of-service attacks...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a series of chips developed by MediaTek Corporation in China. There are security vulnerabilities in MediaTek Chipsets, and these vulnerabilities stem from an exception not being caught by the modem component, which may lead to remote denial-of-service attacks...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a series of chips developed by MediaTek Corporation in China. The MediaTek Chipsets contain security vulnerabilities, which stem from improper modem input validation. These vulnerabilities may lead to remote denial-of-service attacks...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a series of chips developed by MediaTek Corporation in China. There are security vulnerabilities in MediaTek Chipsets, and these vulnerabilities stem from an exception not being caught by the modem component, which may lead to remote denial-of-service attacks...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a series of chips developed by MediaTek Corporation in China. The MediaTek Chipsets contain security vulnerabilities; these vulnerabilities stem from the lack of boundary checking in the modem component, which may lead to remote denial-of-service attacks...

PT-2026-5642

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A flaw exists in Modem that may lead to a system crash due to improper error handling. This could result in a remote denial of service if a User Equipment UE connects to a malicious base statio...

PT-2026-5629

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A system crash due to an uncaught exception may lead to remote denial of service. This can occur if a User Equipment UE connects to a rogue base station controlled by an attacker, requiring no...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a series of chips developed by MediaTek Corporation in China. The MediaTek Chipsets contain security vulnerabilities, which stem from improper modem input validation. These vulnerabilities may lead to remote denial-of-service attacks...

PT-2026-5643

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a series of chips developed by MediaTek Corporation in China. The MediaTek Chipsets contain security vulnerabilities, which stem from improper handling of modem errors. These vulnerabilities may lead to remote denial-of-service attacks...

PT-2026-5624

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A system crash due to an uncaught exception may lead to remote denial of service. This can occur if a User Equipment UE connects to a rogue base station controlled by an attacker, requiring no...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a series of chips developed by MediaTek Corporation in China. There are security vulnerabilities in MediaTek Chipsets, and these vulnerabilities stem from improper input validation in the modem component, which may lead to remote denial-of-service attacks...

PT-2026-5628

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A missing bounds check in Modem could lead to a remote denial of service. This occurs if a User Equipment UE connects to a rogue base station controlled by an attacker. Exploitation does not...

PT-2026-5626

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A missing bounds check in the Modem software could lead to a system crash and a remote denial of service. This scenario occurs if a User Equipment UE connects to a rogue base station controlled...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a series of chips developed by MediaTek Corporation in China. There are security vulnerabilities in MediaTek Chipsets, and these vulnerabilities stem from improper input validation in the modem component, which may lead to remote denial-of-service attacks...

PT-2026-5627

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A flaw exists in Modem that could lead to a remote denial of service. This occurs due to improper input validation, potentially causing a system crash. An attacker can exploit this issue if a...

PT-2026-5644

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

KB5074109: Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 2025 Security Update (January 2026)

The remote Windows host is missing security update 5074109. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Local Security Authority Subsystem Service LSASS allows an authorized attacker to execute code over a network. CVE-2026-20854 - An issue was discovered in...