CVE-2025-24990

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 1/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attacker who successfully exploited this vulnerability could gain administrator privileges.

CISA Known Exploited Vulnerability

Vendor / Product Microsoft — Windows
Date Added 2025-10-14
Remediation Due 2025-11-04
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24990 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24990

Bug Bounty Relevance

1 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

6.37%
Raw Score 0.063690
Percentile 93.6%
Date 2026-10-28

Intelligence Sources

kev ref →