Page generated: 11 Nov 2026, 06:30 UTC
← Dashboard

CVE-2025-24990

Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem…

Read full description
Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware dependent on this specific driver will no longer work on Windows. Microsoft recommends removing any existing dependencies on this hardware.
CVSS 7.8 (HIGH) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
0.0/10
REALITY · THREAT PRIORITY
8.2/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 7.8: +1.17
  • Fresh EPSS: 6.51%: +0.03

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 23 documents and public datasets.

Hype components

Headline sample (25%)
0/100
Press, 30 days (60%)
0/100
Grounded branding (15%)
0/100
HYPE TOTAL0/100

Sources and documents

SOC Prime
Press · 27 Oct 2025, 07:00 · CVE-2025-61932 Exploitation: A New Critical Motex LANSCOPE Endpoint Manager Vulnerability Used in Real-World Attacks - SOC Prime
Qualys
Press · 24 Oct 2025, 07:00 · Microsoft and Adobe Patch Tuesday, October 2025 Security Update Review - Qualys
SOC Prime
Press · 23 Oct 2025, 07:00 · CVE-2025-40778 and CVE-2025-40780: Cache Poisoning Vulnerabilities in BIND 9 Expose DNS Servers to the Risk of Attacks - SOC Prime
Forbes
Press · 18 Oct 2025, 07:00 · Patch These Microsoft Windows Vulnerabilities Now, CISA Warns - Forbes
Computerworld
Press · 17 Oct 2025, 07:00 · For October’s Patch Tuesday, a scary number of fixes - Computerworld
See all 23 source documents
SOC Prime
Press · 16 Oct 2025, 07:00 · CVE-2025-59230 and CVE-2025-24990 Vulnerabilities: New Windows Zero-Days Under Active Exploitation - SOC Prime
Computer Weekly
Press · 15 Oct 2025, 07:00 · Patch Tuesday: Windows 10 end of life pain for IT departments - Computer Weekly
JPCERT コーディネーションセンター
Press · 15 Oct 2025, 07:00 · Microsoft Releases October 2025 Security Updates - JPCERT コーディネーションセンター
Petri IT Knowledgebase
Press · 15 Oct 2025, 07:00 · Microsoft's October 2025 Patch Tuesday Updates Fix 175 Flaws - Petri IT Knowledgebase
The Hacker News
Press · 15 Oct 2025, 07:00 · Two New Windows Zero-Days Exploited in the Wild — One Affects Every Version Ever Shipped - The Hacker News
www.thestack.technology
Press · 15 Oct 2025, 07:00 · Patch Tuesday: Windows users hacked due to legacy fax modem driver - www.thestack.technology
Cyber Daily
Press · 15 Oct 2025, 07:00 · 5 new vulnerabilities added to CISA’s KEV catalogue - Cyber Daily
Field Effect
Press · 15 Oct 2025, 07:00 · Microsoft's record-breaking October 2025 Patch Tuesday fixes 175 flaws - Field Effect
Help Net Security
Press · 15 Oct 2025, 07:00 · Microsoft patches three zero-days actively exploited by attackers - Help Net Security
LinkedIn
Press · 14 Oct 2025, 07:00 · Microsoft October 2025 Patch Tuesday Fixes 170+ Vulnerabilities Including Multiple Zero-Day Flaws - LinkedIn
Lifehacker
Press · 14 Oct 2025, 07:00 · Microsoft's October 'Patch Tuesday' Update Fixes Over 170 Flaws - Lifehacker
BleepingComputer
Press · 14 Oct 2025, 07:00 · Microsoft October 2025 Patch Tuesday fixes 6 zero-days, 172 flaws - BleepingComputer
Cisco Talos Blog
Press · 14 Oct 2025, 07:00 · Microsoft Patch Tuesday for October 2025 — Snort rules and prominent vulnerabilities - Cisco Talos Blog
The Register
Press · 14 Oct 2025, 07:00 · Frightful Patch Tuesday gives admins a scare with 175+ Microsoft CVEs, 3 under attack - The Register
CyberScoop
Press · 14 Oct 2025, 07:00 · Microsoft’s Patch Tuesday fixes 175 vulnerabilities, including two actively exploited zero-days - CyberScoop
Krebs on Security
Press · 14 Oct 2025, 07:00 · Patch Tuesday, October 2025 ‘End of 10’ Edition - Krebs on Security
Absolute Security
Press · 14 Oct 2025, 07:00 · October 2025 Patch Tuesday: Critical Microsoft CVEs & Patching Tips - Absolute Security
Rapid7
Press · 14 Oct 2025, 07:00 · Patch Tuesday - October 2025 - Rapid7

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 8.2 (2026-11-02 15:13). The curve appears once the score changes.

Public exploit evidence

1

Public exploit entries / repo candidates

See 1 repos with metrics
RepositoryStarsForksLanguageUpdated
moiz-2x/CVE-2025-24990_POC5813C31 Oct 2025, 15:17
Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 7.8; EPSS 6.5%
Attention, last 30 days
0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential
local access, low privileges, no user interaction.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:59:31.695937+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
Added to the CISA KEV catalog
14 Oct 2025, 00:00
First press mention
14 Oct 2025, 07:00
Published
14 Oct 2025, 17:00
Latest press mention
27 Oct 2025, 07:00
Score calculated
05 Nov 2026, 13:59
PoCs on GitHub
1 repositories