Story perspectives

Microsoft's October Patch Fixes 175 Vulnerabilities, Urges Immediate Update

10/14/2025

Summary

Story summary

Microsoft’s October 2025 Patch Tuesday addressed 175 vulnerabilities, including four zero-day flaws, with two actively exploited.
Key vulnerabilities include CVE-2025-24990 and CVE-2025-59230, both rated 7.8, which affect the Agere Modem driver and Windows Remote Access Connection Manager, allowing attackers to gain administrative privileges.
Microsoft removed the vulnerable modem driver from Windows, impacting dependent hardware, and included five critical vulnerabilities, such as CVE-2025-59287, which enables remote code execution in Windows Server Update Service.
Users are urged to install the updates promptly to secure their systems.

1 of 1

Story summary

Microsoft’s October 2025 Patch Tuesday addressed 175 vulnerabilities, including four zero-day flaws, with two actively exploited.
Key vulnerabilities include CVE-2025-24990 and CVE-2025-59230, both rated 7.8, which affect the Agere Modem driver and Windows Remote Access Connection Manager, allowing attackers to gain administrative privileges.
Microsoft removed the vulnerable modem driver from Windows, impacting dependent hardware, and included five critical vulnerabilities, such as CVE-2025-59287, which enables remote code execution in Windows Server Update Service.
Users are urged to install the updates promptly to secure their systems.