Microsoft Patches 173 Vulnerabilities, Including Exploited Windows Flaws

Microsoft has rolled out patches for 173 unique CVEs across its products, including two flaws that have been exploited in the wild, as part of its October 2025 update cycle dated 15 October 2025. The first exploited issue, CVE-2025-24990, is an untrusted pointer dereference bug in the Agere Modem driver that could allow privilege escalation, and the LTMDM64.SYS driver is also affected by CVE-2025-24052, an elevation of privilege weakness with a PoC exploit.

The second exploited vulnerability, CVE-2025-59230, is an improper access control in Windows Remote Access Connection Manager that could enable SYSTEM privileges. Among the 21 non-Microsoft CVEs in the advisory, at least one, CVE-2025-47827, impacts IGEL OS and can lead to a Secure Boot bypass. Other notable fixes include CVE-2025-2884, a medium-severity out-of-bounds read in the TPM 2.0 reference library, CVE-2025-0033 known as RMPocalypse, and CVE-2025-59489 in Unity that could lead to code execution. Microsoft notes that roughly a dozen flaws are likely to be exploited in attacks.