Microsoft Inbox COM Objects Use-After-Free Vulnerability Allowing Local Remote Code Execution

A use-after-free vulnerability has been identified in Inbox COM Objects, which could allow an unauthorized attacker to execute code locally. This vulnerability arises from a memory management issue that can be exploited under certain conditions.

Impact

Exploitation of this vulnerability could lead to unauthorized local code execution.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. This security update is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5066835 for Windows 11 and KB5066782 for Windows Server 2022.