Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
History

Tue, 14 Oct 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Tue, 14 Oct 2025 17:15:00 +0000

Type Values Removed Values Added
Description Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
Title Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
Weaknesses CWE-416
References
Metrics cvssV3_1

{'score': 7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C'}


cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2025-10-14T19:37:37.799Z

Reserved: 2025-09-03T20:46:29.257Z

Link: CVE-2025-58734

cve-icon Vulnrichment

Updated: 2025-10-14T19:35:55.939Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-10-14T17:15:55.563

Modified: 2025-10-14T19:35:56.913

Link: CVE-2025-58734

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.