Microsoft Releases October 2025 Security Updates

Microsoft Releases October 2025 Security Updates ↗ source

October 15, 2025 JPCERT/CC Alert

Source: https://www.jpcert.or.jp/english/at/2025/at250022.html

Summary

Remote attackers leveraging these vulnerabilities may be able to execute arbitrary code. According to Microsoft, among the vulnerabilities, the following vulnerability have been confirmed to be exploited in the wild. Please consider applying the security update programs by referring to the information provided by Microsoft. Windows Agere Modem Driver Elevation of Privilege Vulnerability Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Additionally, Microsoft announced that support for Windows 10 has ended on October 14, 2025. As security updates for Windows 10 will no longer be provided, please consider measures such as upgrading to Windows 11.

News Coverage

No coverage found in monitored research blogs or news feeds.

CVEs Referenced in This Publication

CVE	CVSS	Affected
CVE-2025-24990	7.8 High	Microsoft Windows Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attacker who su…
CVE-2025-59230	7.8 High	Microsoft Windows Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attac…
CVE-2025-47827	4.6 Medium	IGEL IGEL OS IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly ve…

Extracted from the publication text. Each CVE links to its tracked detail page.

Vendors Named in This Publication

Microsoft 388 KEV IGEL 1 KEV

Each vendor links to its Known Exploited Vulnerabilities catalog page. Only vendors that appear in the KEV catalog are listed, either because the publication cites one of their KEV entries or because it names them directly.