Microsoft Inbox COM Objects Use-After-Free Vulnerability Allowing Local Remote Code Execution

A use-after-free vulnerability has been identified in Inbox COM Objects, which could allow an unauthorized attacker to execute code locally. This vulnerability arises from a use-after-free condition, where memory that is no longer needed is improperly accessed, potentially leading to arbitrary code execution.

Impact

Exploitation of this vulnerability could result in remote code execution.

Remediation

Users can apply the security update available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5066835, KB5066873, KB5066875, KB5066836, KB5066780, KB5066791, KB5066586, and KB5066782.