CVE-2025-58730CWE-416

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

High · published October 14, 2025

CVSS v3.1
7.0
EPSS
0%
Percentile
27.4
In the wild
Unconfirmed
What it is

⚡ A local code execution vulnerability is hiding in Inbox COM Objects, waiting for an unauthorized attacker to strike! 🔥 Think of this as a restaurant kitchen where a chef accidentally leaves a sharp knife unattended on the counter. If someone unauthorized strolls in, they could grab it and create a real mess! An attacker could exploit this flaw to run arbitrary code on the local system, potentially leading to data theft, system compromise, or even full control over the affected machine. The consequences could be absolutely devastating, affecting user privacy and security.

Put simply

Think of this as a restaurant kitchen where a chef accidentally leaves a sharp knife unattended on the counter. If someone unauthorized strolls in, they could grab it and create a real mess! This use-after-free vulnerability allows an attacker to execute code locally due to improper memory management in Inbox COM Objects. When the memory is accessed after it has been freed, it can lead to unpredictable behavior, giving attackers a chance to run malicious code.

What to do

An attacker could exploit this flaw to run arbitrary code on the local system, potentially leading to data theft, system compromise, or even full control over the affected machine. The consequences could be absolutely devastating, affecting user privacy and security. To remediate, ensure you apply the latest security updates to your affected software version immediately. Implement memory management best practices and conduct a thorough code review to catch similar issues in your applications. You've got this! Stay vigilant and follow these steps to secure your systems! 🛡️

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00350 · 27.4th percentile
Weakness
CWE-416 · Use After Free
Published
2025-10-14T17:01Z
EPSS history
Timeline
  • 14 OCT 17:01Z
    Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
    cvelistv5