CVE-2025-58731CWE-416

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

High · published October 14, 2025

CVSS v3.1
7.0
EPSS
0%
Percentile
27.4
In the wild
Unconfirmed
What it is

⚡ A sneaky use-after-free bug in Inbox COM Objects could let unauthorized attackers execute code locally — like finding an old ticket that still gets you into a concert! 🎟️ Imagine you’ve got a VIP pass to a concert, but it’s mysteriously still valid even after the event is over. This vulnerability allows attackers to exploit what should have been discarded memory, granting them access to execute code as if they were insiders. If exploited, an attacker could take control of the affected system, potentially compromising personal data, altering settings, and wreaking havoc. This could lead to unauthorized access to sensitive information, making it a serious risk for users. Don't let your system become a playground for attackers!

Put simply

Imagine you’ve got a VIP pass to a concert, but it’s mysteriously still valid even after the event is over. This vulnerability allows attackers to exploit what should have been discarded memory, granting them access to execute code as if they were insiders. This vulnerability arises from improper handling of memory in Inbox COM Objects, allowing attackers to reuse freed memory space, which can lead to arbitrary code execution on the affected machine.

What to do

If exploited, an attacker could take control of the affected system, potentially compromising personal data, altering settings, and wreaking havoc. This could lead to unauthorized access to sensitive information, making it a serious risk for users. Don't let your system become a playground for attackers! To remediate this issue, ensure you're using the latest version of your software where this vulnerability has been patched. Regularly check for updates and apply security patches. Additionally, limit user access rights to minimize potential damage. You've got this! Stay vigilant and proactive to keep your environment secure. 🛡️

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00350 · 27.4th percentile
Weakness
CWE-416 · Use After Free
Published
2025-10-14T17:01Z
EPSS history
Timeline
  • 14 OCT 17:01Z
    Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
    cvelistv5