HIGH

CVE-2025-24990

Microsoft Windows 10 1507 2025-10-14 CVSS v3.1

CVSS

7.8

KEV

Description

Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update.
Fax modem hardware dependent on this specific driver will no longer work on Windows.
Microsoft recommends removing any existing dependencies on this hardware.

Summary dbcve.org

The ltmdm64.sys Agere Modem driver that shipped natively with supported Windows operating systems contains vulnerabilities (CVSS 7.8). Microsoft removed this third-party driver in the October cumulative update, causing any fax modem hardware dependent on this driver to cease functionality.

Mitigation

Organizations should inventory systems relying on Agere modem hardware, assess business processes dependent on fax functionality, and migrate to alternative solutions before applying the October cumulative update. Microsoft recommends removing any existing dependencies on this hardware.

Weakness (CWE)

CWE-822

EPSS Score

6.37%

Probability of exploitation in next 30 days

93.3th percentile

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24990 Vendor Advisory https://www.vicarius.io/vsociety/posts/cve-2025-24990-detection-script-elevation-of-privilege-vulnerability-in-agere-modem-driver-affecting-windows Third Party Advisory https://www.vicarius.io/vsociety/posts/cve-2025-24990-mitigation-script-elevation-of-privilege-vulnerability-in-agere-modem-driver-affecting-windows Mitigation, Third Party Advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24990 US Government Resource

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE