CVE-2025-58736CWE-416

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

High · published October 14, 2025

CVSS v3.1
7.0
EPSS
0%
Percentile
27.4
In the wild
Unconfirmed
What it is

🚨 A local exploit that’s as easy as drawing a sign-in form! A use after free vulnerability in Inbox COM Objects lets an unauthorized attacker potentially run code without much trouble at all! ⚡ Think of it like a restaurant that has an empty table reserved but forgets to take the reservation off the books. An unscrupulous diner could swoop in and sit down at that table — in this case, executing unauthorized code on your system! If exploited, this vulnerability could allow an attacker to run arbitrary code on your local machine, potentially leading to data breaches or system control. Imagine your valuable data being at the mercy of a malicious user who can access it unfettered!

Put simply

Think of it like a restaurant that has an empty table reserved but forgets to take the reservation off the books. An unscrupulous diner could swoop in and sit down at that table — in this case, executing unauthorized code on your system! This vulnerability arises from a use after free issue, where the system continues to reference a memory location that has been deallocated, allowing an attacker to execute potentially harmful code.

What to do

If exploited, this vulnerability could allow an attacker to run arbitrary code on your local machine, potentially leading to data breaches or system control. Imagine your valuable data being at the mercy of a malicious user who can access it unfettered! To protect yourself, ensure that your Inbox COM Objects are updated to the latest version provided by the developers. Additionally, auditing your local environment for security configurations can help mitigate risks. Regularly check for patches and apply them promptly! You’ve got this! Follow these steps, and you’ll have your security tightened and ready to go in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00350 · 27.4th percentile
Weakness
CWE-416 · Use After Free
Published
2025-10-14T17:01Z
EPSS history
Timeline
  • 14 OCT 17:01Z
    Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
    cvelistv5