JPCERT-AT-2025-0022
JPCERT/CC
2025-10-15

I. Overview

Microsoft has released October 2025 Security Updates to address the vulnerabilities in their products. Remote attackers leveraging these vulnerabilities may be able to execute arbitrary code.

Microsoft Corporation
October 2025 Security Updates
https://msrc.microsoft.com/update-guide/en-us/releaseNote/2025-Oct

According to Microsoft, among the vulnerabilities, the following vulnerability have been confirmed to be exploited in the wild. Please consider applying the security update programs by referring to the information provided by Microsoft.

CVE-2025-24990
Windows Agere Modem Driver Elevation of Privilege Vulnerability
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24990

CVE-2025-47827
MITRE CVE-2025-47827: Secure Boot bypass in IGEL OS before 11
https://msrc.microsoft.com/update-guide/en-us/vulnerability/CVE-2025-47827

CVE-2025-59230
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-59230

Additionally, Microsoft announced that support for Windows 10 has ended on October 14, 2025. As security updates for Windows 10 will no longer be provided, please consider measures such as upgrading to Windows 11.

Microsoft Corporation
Windows 10 support has ended on October 14, 2025
https://support.microsoft.com/en-us/windows/windows-10-support-has-ended-on-october-14-2025-2ca8b313-1946-43d3-b55c-2b95b107f281

II. Solution

Please apply the security update programs through Microsoft Update, Windows Update, etc.

Microsoft Update Catalog
https://www.catalog.update.microsoft.com/

Windows Update: FAQ
https://support.microsoft.com/en-us/help/12373/windows-update-faq

III. References

Microsoft Corporation
Release Notes
https://msrc.microsoft.com/update-guide/

If you have any information regarding this alert, please contact JPCERT/CC.

JPCERT Coordination Center (Early Warning Group)
MAIL: ew-info@jpcert.or.jp
https://www.jpcert.or.jp/english/