CVE-2025-24990

Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware dependent on this specific driver will no longer work on Windows. Microsoft recommends removing any existing dependencies on this hardware.

• CWE-822

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24990Vendor Advisory
• https://www.vicarius.io/vsociety/posts/cve-2025-24990-detection-script-elevation-of-privilege-vulnerability-in-agere-modem-driver-affecting-windowsThird Party Advisory
• https://www.vicarius.io/vsociety/posts/cve-2025-24990-mitigation-script-elevation-of-privilege-vulnerability-in-agere-modem-driver-affecting-windowsMitigation, Third Party Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24990US Government Resource

Published

Oct 14, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-24985Integer overflow or wraparound in Windows Fast FAT Driver al…7.8
• CVE-2025-24986Improper isolation or compartmentalization in Azure PromptFl…6.5
• CVE-2025-24987Out-of-bounds read in Windows USB Video Driver allows an aut…6.8
• CVE-2025-24988Out-of-bounds read in Windows USB Video Driver allows an aut…6.8
• CVE-2025-24989An improper access control vulnerability in Power Pages allo…9.8
• CVE-2025-2499Client side access control bypass in the permission componen…5.4
• CVE-2025-24991Out-of-bounds read in Windows NTFS allows an authorized atta…5.5
• CVE-2025-24992Buffer over-read in Windows NTFS allows an unauthorized atta…5.5
• CVE-2025-24993Heap-based buffer overflow in Windows NTFS allows an unautho…7.8
• CVE-2025-24994Improper access control in Windows Cross Device Service allo…7.3
• CVE-2025-24995Heap-based buffer overflow in Kernel Streaming WOW Thunk Ser…7.8
• CVE-2025-24996External control of file name or path in Windows NTLM allows…6.5