Microsoft Windows Inbox COM Objects Use-After-Free Vulnerability Leading to Local Remote Code Execution

A use-after-free vulnerability has been identified in Inbox COM Objects, which allows an unauthorized attacker to execute code locally. This vulnerability arises from a memory management issue where an object can be accessed after it has been freed, potentially leading to arbitrary code execution.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can apply the security update KB5066836 for Windows Server 2016, Windows 10 Version 1607, and various other Windows 11 and Windows Server versions. This update is available through the Microsoft Update Catalog.