High severity · published Oct 14, 2025
CVE-2025-24052
Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems
7.8
CVSS
2.4%
EPSS
No
On KEV
Description
Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware dependent on this specific driver will no longer work on Windows. Microsoft recommends removing any existing dependencies on this hardware.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
W1
Windows 10 1507 · Microsoft
before 10.0.10240.21161 · source: NVD
W1
Windows 10 1607 · Microsoft
before 10.0.14393.8519 · source: NVD
W1
Windows 10 1809 · Microsoft
before 10.0.17763.7919 · source: NVD
W1
Windows 10 21h2 · Microsoft
before 10.0.19044.6456 · source: NVD
W1
Windows 10 22h2 · Microsoft
before 10.0.19045.6456 · source: NVD
W1
Windows 11 22h2 · Microsoft
before 10.0.22621.6060 · source: NVD
W1
Windows 11 23h2 · Microsoft
through 10.0.22631.6060 · source: NVD
W1
Windows 11 24h2 · Microsoft
before 10.0.26100.6899 · source: NVD
W1
Windows 11 25h2 · Microsoft
before 10.0.26200.6899 · source: NVD
WS
Windows Server 2016 · Microsoft
through 10.0.14393.8519 · source: NVD
Affected product
W1
Windows 10 1507
Microsoft
More from Windows 10 1507
9.8
CVE-2017-8543
Microsoft Windows Search Remote Code Execution Vulnerability
8.8
CVE-2025-33073
Windows SMB Client Elevation of Privilege Vulnerability
8.8
CVE-2025-33053
Internet Shortcut Files Remote Code Execution Vulnerability
8.8
CVE-2024-49039
Windows Task Scheduler Elevation of Privilege Vulnerability
8.8
CVE-2024-43461
Windows MSHTML Platform Spoofing Vulnerability