Microsoft Windows Inbox COM Objects Use-After-Free Vulnerability Leading to Local Remote Code Execution

A use-after-free vulnerability has been identified in Inbox COM Objects, allowing an unauthorized attacker to execute code locally. This vulnerability arises from improper memory management, which creates a race condition that can be exploited under certain conditions.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can apply the security update KB5066835 to address this vulnerability. This update is available through the Microsoft Update Catalog.