CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Windows Agere Modem Driver (ltmdm64.sys) Privilege Escalation Vulnerability (CVE-2025-24990) Technical Advisory
[Affected Scope] Microsoft Windows operating systems with the third-party Agere Modem driver (ltmdm64.sys) installed or natively shipped
[Impact] Local attackers can execute arbitrary code with SYSTEM privileges, leading to full host compromise. This vulnerability is actively exploited in the wild (CISA KEV)
[Mitigation] Apply the Microsoft October cumulative update to completely remove the driver, or manually disable and restrict the driver service
Windows DWM Core Library Elevation of Privilege Vulnerability (CVE-2023-36033) Analysis and Mitigation Guide
[Affected Scope] All supported versions of Windows 10, 11, and Windows Server utilizing the Desktop Window Manager (DWM) core library.
[Impact] A local attacker can exploit this vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete system compromise.
[Mitigation] Immediately apply the official Microsoft cumulative security updates released in November 2023 or later.