Windows Agere Modem Driver Elevation of Privilege Vulnerability
CVE-2025-24990 is an elevation of privilege vulnerability in Agere Windows Modem Driver (rated Important, CVSS 7.8). Microsoft reports that it is being exploited.
Exploited1 version
Facts
- Microsoft id
CVE-2025-24990- Status
- Exploited
- Products
- Agere Windows Modem Driver
- Severity
- Important
- Impact
- Elevation of Privilege
- CVSS
- 7.8
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
- Exploited
- Yes
- Publicly disclosed
- No
- Exploitability
- Exploitation Detected
- Customer action required
- Yes
- Release
- 2025-Oct
- Assigned by
- Microsoft
- Weakness
- CWE-822: Untrusted Pointer Dereference
- MSRC revision
- 1.0
- First captured by us
- (from our first import of this list)
- Microsoft last modified
- Source
- Security updates · open the original at Microsoft
Microsoft's revision notes
- Revision 1.0, 2025-10-14:
Information published.
Microsoft says
Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems.
What Microsoft changed
One version so far. If Microsoft edits it, each change shows here with what was removed and added.
First version we captured ·
As first seen: Exploited
- Status
- Exploited
Seen by us · Microsoft's timestamp · Microsoft's page