CVE-2025-24052

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware dependent on this specific driver will no longer work on Windows. Microsoft recommends removing any existing dependencies on this hardware.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121

Affected software

No affected versions have been published.

Timeline

Published
Oct 14, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-240537.2Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network.CVE-2025-240545.4External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.CVE-2025-240554.3Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack.CVE-2025-240568.8Heap-based buffer overflow in Windows Telephony Server allows an unauthorized attacker to execute code over a network.CVE-2025-240577.8Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-240587.8Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.CVE-2025-240597.8Incorrect conversion between numeric types in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locaCVE-2025-24067.6Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Verisay Communication and InforCVE-2025-240607.8Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.CVE-2025-240617.8Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature locally.CVE-2025-240627.8Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.CVE-2025-240637.8Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2025-24052: High severity, CVSS 7.8 | Vulnix