CVE entry · CVE-2025-24990
CVE-2025-24990: Microsoft Windows Untrusted Pointer Dereference Vulnerability
Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attacker who successfully exploited this vulnerability could gain administrator privileges.
- Actively exploited: added to CISA’s KEV catalog on October 14, 2025.
- Use by ransomware: not established so far.
- Remediation deadline for US federal agencies: November 4, 2025.
Description from CISA’s KEV catalog.
What to do
- Check whether your estate includes Microsoft Windows, including internet-facing devices.
- Apply the vendor’s patch or mitigations (references below). Failing that, isolate the product or stop using it, as CISA requires of US federal agencies.
- An exploited vulnerability has often been used before it was fixed: look for signs of compromise, especially on internet-facing devices.
References
- Vendor advisory or reference cited by CISA (msrc.microsoft.com)
- NVD entry (NIST)
- CISA KEV catalog
Other Microsoft vulnerabilities
-
Microsoft Windows Command Injection Vulnerability
-
Microsoft SharePoint Code Injection Vulnerability
-
Microsoft Windows Heap-Based Buffer Overflow Vulnerability
-
Microsoft Windows Link Following Vulnerability
-
Microsoft SQL Server Remote Code Execution Vulnerability
-
Microsoft SharePoint Weak Authentication Vulnerability