Race Condition in Microsoft Inbox COM Objects Allows Local Code Execution
CVE-2025-59282
7HIGH
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 14 October 2025
What is CVE-2025-59282?
A race condition vulnerability exists in Microsoft Inbox COM Objects, which could allow an unauthorized attacker to execute arbitrary code locally. This weakness arises from improper synchronization when multiple processes access shared resources concurrently. If exploited, this vulnerability could permit attackers to manipulate system operations and run malicious commands, emphasizing the importance of security awareness and timely updates.
Affected Version(s)
Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.21161
Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.8519
Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.7919