CVE-2025-24990—Microsoft Windows Untrusted Pointer Dereference Vulnerability

Vulnerability Name

Microsoft Windows Untrusted Pointer Dereference Vulnerability

Description

Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attacker who successfully exploited this vulnerability could gain administrator privileges.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

Unknown

Action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Additional Notes

• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24990
• https://nvd.nist.gov/vuln/detail/CVE-2025-24990

Related News Articles

• Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively ExploitedJanuary 14, 2026
• Still on Windows 10? Enroll in free ESU before next week’s Patch TuesdayNovember 8, 2025
• Two New Windows Zero-Days Exploited in the Wild — One Affects Every Version Ever ShippedOctober 15, 2025

Related Weaknesses

• CWE-822