CVE-2025-24990

Microsoft Windows Untrusted Pointer Dereference Vulnerability
7.9%
EPSS
95%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attacker who successfully exploited this vulnerability could gain administrator privileges.

Vendor
Microsoft
Product
Windows
Added to KEV
Oct 14, 2025
Remediation due
Nov 4, 2025 (US federal deadline)
Ransomware use
Not known
Weakness
CWE-822
EPSS
7.9% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded