Microsoft Windows: 2 exploited vulnerabilities (CVE-2025-24990, CVE-2025-59230) ยท updates https://pwn.watch/i/microsoft-windows-cve-2025-24990 CVE-2025-24990: Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attacker who successfully exploited this vulnerability could gain administrator privileges. CVE-2025-59230: Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attacker to elevate privileges locally. Added to CISA KEV on 2025-10-14. en Tue, 14 Oct 2025 00:00:00 GMT Microsoft Windows: 2 exploited vulnerabilities (CVE-2025-24990, CVE-2025-59230): CISA added CVE-2025-24990 to the KEV catalog (due 2025-11-04). https://pwn.watch/i/microsoft-windows-cve-2025-24990 https://pwn.watch/i/microsoft-windows-cve-2025-24990#2025-10-14-2ef31344 Tue, 14 Oct 2025 00:00:00 GMT high <p>Microsoft Windows: 2 exploited vulnerabilities (CVE-2025-24990, CVE-2025-59230): CISA added CVE-2025-24990 to the KEV catalog (due 2025-11-04).</p> Microsoft Windows: 2 exploited vulnerabilities (CVE-2025-24990, CVE-2025-59230): CISA added CVE-2025-59230 to the KEV catalog (due 2025-11-04). https://pwn.watch/i/microsoft-windows-cve-2025-24990 https://pwn.watch/i/microsoft-windows-cve-2025-24990#2025-10-14-eac7decd Tue, 14 Oct 2025 00:00:00 GMT high <p>Microsoft Windows: 2 exploited vulnerabilities (CVE-2025-24990, CVE-2025-59230): CISA added CVE-2025-59230 to the KEV catalog (due 2025-11-04).</p>