CVE-2025-58738CWE-416

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

High · published October 14, 2025

CVSS v3.1
7.0
EPSS
0%
Percentile
27.4
In the wild
Unconfirmed
What it is

⚡ A use-after-free vulnerability in Inbox COM Objects could let an unauthorized attacker run malicious code locally — a serious security slip! 🔥 Think of it like a restaurant that forgets to clean up the table after a meal. If the staff leaves out the dirty dishes, anyone can come in and mix up the leftovers to create something unsavory! If exploited, an attacker could execute arbitrary code on the affected system, potentially gaining access to sensitive information or taking control of the machine altogether. This means your data could be compromised and your system turned into a launchpad for further attacks — absolutely devastating!

Put simply

Think of it like a restaurant that forgets to clean up the table after a meal. If the staff leaves out the dirty dishes, anyone can come in and mix up the leftovers to create something unsavory! This vulnerability arises when the Inbox COM Objects fail to properly manage the lifecycle of memory during certain operations, allowing attackers to exploit freed memory blocks and execute their code.

What to do

If exploited, an attacker could execute arbitrary code on the affected system, potentially gaining access to sensitive information or taking control of the machine altogether. This means your data could be compromised and your system turned into a launchpad for further attacks — absolutely devastating! To remediate this, update your system to the latest version that addresses CVE-2025-58738. Ensure proper application of security patches and conduct regular security audits to detect any unauthorized access. Don't wait—protect your systems now! You've got this! Follow these steps, and you'll be a security hero in no time! 🦸

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00350 · 27.4th percentile
Weakness
CWE-416 · Use After Free
Published
2025-10-14T17:01Z
EPSS history
Timeline
  • 14 OCT 17:01Z
    Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
    cvelistv5