Two New Windows Zero-Days Exploited in the Wild — One Affects Every Version Ever Shipped
Summary: Microsoft released fixes for 183 security flaws on Tuesday, including three vulnerabilities under active exploitation, as it ended support for Windows 10 unless PCs are enrolled in the Extended Security Updates program. The two Windows zero-days, CVE-2025-24990 and CVE-2025-59230, allow attackers to execute code with elevated privileges, and a third exploited flaw is a Secure Boot bypass in IGEL OS before version 11 (CVE-2025-47827).
Why it matters: The Agere driver flaw ships with every version of Windows up to and including Server 2025, so a local attacker with a minimally privileged account can elevate to administrator regardless of whether the associated hardware is present. All three issues are in CISA's KEV catalog, requiring federal agencies to patch by November 4, 2025.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2025-24990CVE-2025-2884CVE-2025-47827CVE-2025-59230CVE-2025-59287CVE-2025-59295
- Related
- Patch Tuesday, October 2025 ‘End of 10’ Edition Cyber Risks ·CVE-2025-59287: Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability Known Exploited Vulnerabilities · Oct 24, 2025