// March 2026

Untrusted pointer dereference CVE-2025-24990

Vulnerability details Advisory: SB2025101458 – Privilege escalation in Microsoft Windows Agere Modem driver Vulnerable component: Windows CVE-ID: CVE-2025-24990 CVSSv3 score: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C CWE-ID: CWE-822 – Untrusted Pointer Dereference Description: The vulnerability allows a local user to escalate privileges on the system. The vulnerability exists due to untrusted pointer dereference in the third party Agere Modem driver ltmdm64.sys that ships natively […]