PULSEUnderground Intel

EN VIVO0señales / 24h

FEED

vulnKEV agrega CVE-2023-49105 — ownCloud / ownCloudvulnKEV agrega CVE-2026-53362 — Linux / KernelvulnKEV agrega CVE-2026-66384 — JFrog / ArtifactoryvulnKEV agrega CVE-2021-23758 — Ajax.NET Professional / Ajax.NET ProfessionalvulnKEV agrega CVE-2015-3246 — Red Hat / LibuservulnKEV agrega CVE-2015-5287 — Red Hat / Automatic Bug Reporting ToolvulnKEV agrega CVE-2022-0995 — Linux / KernelvulnKEV agrega CVE-2026-8452 — Citrix / NetScaler ADC and NetScaler GatewayvulnKEV agrega CVE-2019-1068 — Microsoft / SQL ServervulnKEV agrega CVE-2026-60004 — Gitea / GiteavulnKEV agrega CVE-2026-21962 — Oracle / HTTP Server and Oracle Weblogic Server Proxy Plug-invulnKEV agrega CVE-2026-73570 — Synacor / Zimbra Collaboration Suite (ZCS)vulnKEV agrega CVE-2026-72530 — TrueConf / ServervulnKEV agrega CVE-2026-72529 — TrueConf / ServervulnKEV agrega CVE-2023-49105 — ownCloud / ownCloudvulnKEV agrega CVE-2026-53362 — Linux / KernelvulnKEV agrega CVE-2026-66384 — JFrog / ArtifactoryvulnKEV agrega CVE-2021-23758 — Ajax.NET Professional / Ajax.NET ProfessionalvulnKEV agrega CVE-2015-3246 — Red Hat / LibuservulnKEV agrega CVE-2015-5287 — Red Hat / Automatic Bug Reporting ToolvulnKEV agrega CVE-2022-0995 — Linux / KernelvulnKEV agrega CVE-2026-8452 — Citrix / NetScaler ADC and NetScaler GatewayvulnKEV agrega CVE-2019-1068 — Microsoft / SQL ServervulnKEV agrega CVE-2026-60004 — Gitea / GiteavulnKEV agrega CVE-2026-21962 — Oracle / HTTP Server and Oracle Weblogic Server Proxy Plug-invulnKEV agrega CVE-2026-73570 — Synacor / Zimbra Collaboration Suite (ZCS)vulnKEV agrega CVE-2026-72530 — TrueConf / ServervulnKEV agrega CVE-2026-72529 — TrueConf / Server

← Todos los CVEs

CVE Watch—

CVE-2025-24990

Microsoft Windows Untrusted Pointer Dereference Vulnerability

CVSS

—

Sin CVSS

EPSS

6.3%

p93

KEV

SÍ

14 oct 2025

Exploit Today

78

0-100

Publicado: — · Última mod.: —

EPSS · 30d

6.0%EPSS · 30 días6.3%

2026-08-022026-08-31

Ficha del catálogo KEV

Producto

Microsoft / Windows

Vulnerabilidad

Microsoft Windows Untrusted Pointer Dereference Vulnerability

Añadido a KEV

14 oct 2025

Remediar antes de

4 nov 2025

Uso conocido en ransomware

No

Descripción resumida

Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attacker who successfully exploited this vulnerability could gain administrator privileges.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24990 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24990

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-322024.3 MED

KEV—80Microsoft Windows Protection Mechanism Failure Vulnerability17d CVE-2026-208055.5 MED

KEV—78Microsoft Windows Information Disclosure Vulnerability32d CVE-2025-266337.0 ALT

KEV—79Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability27d CVE-2024-490398.8 ALT

KEV—79Microsoft Windows Task Scheduler Privilege Escalation Vulnerability28d CVE-2024-434618.8 ALT

KEV—80Microsoft Windows MSHTML Platform Spoofing Vulnerability21d CVE-2024-382175.4 MED

KEV—79Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability21d