Microsoft patches 175 flaws drops Agere driver as Win10 support ends

Microsoft released its October 2025 Patch Tuesday update on Tuesday, addressing a record-sized batch of 175 vulnerabilities across its products, including multiple zero-day flaws that have been exploited in the wild and the removal of a legacy driver from Windows. The update also coincides with the end of regular security support for Windows 10 and several other Microsoft products.

Microsoft said the package fixes two zero-day vulnerabilities that were being actively exploited: CVE-202524990, a privilege-escalation flaw in the Agere modem driver ltmdm64.sys, and CVE-202559230, an improper access-control vulnerability in the Windows Remote Access Connection Manager service. U.S. cybersecurity officials and some researchers have flagged a related zero-day, CVE-202547827, affecting IGEL OS; the Cybersecurity and Infrastructure Security Agency added exploited vulnerabilities to its known exploited vulnerabilities catalog this week and urged federal agencies to remediate them quickly.

The Agere driver flaw has broad reach because the third-party driver ships with supported Windows releases. Microsoft removed the driver in the October cumulative update; systems that rely on Agere...