Remote Code Execution Vulnerability in Inbox COM Objects by Microsoft
CVE-2025-58730

7HIGH

What is CVE-2025-58730?

A use-after-free vulnerability in Microsoft Inbox COM Objects can be exploited by an unauthorized attacker to execute arbitrary code on the affected system. This flaw arises when the system mishandles memory, leading to potential exploitation without proper authorization. Awareness and prompt patching are essential to mitigate the risks associated with this vulnerability.

Affected Version(s)

Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.21161

Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.8519

Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.7919

References

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.