Microsoft Windows Inbox COM Objects Use-After-Free Vulnerability Allowing Local Remote Code Execution

A use-after-free vulnerability has been identified in Inbox COM Objects, which could allow an unauthorized attacker to execute code locally. This vulnerability arises from a memory management issue where an object can be accessed after it has been freed, potentially leading to arbitrary code execution.

Impact

Exploitation of this vulnerability could result in remote code execution on the affected system.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. This security update is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5066791, KB5066792, KB5066793, KB5066835, KB5066872, KB5066873, KB5066874, KB5066875, KB5066876, KB5066877, KB5066586, KB5066780, KB5066782, KB5066836, and KB5066586.