Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• microsoft windows server 2008all versions
• microsoft windows server 2008r2
• microsoft windows server 2012all versions
• microsoft windows server 2012r2
• microsoft windows server 2016up to 10.0.14393.8519 inclusive
• microsoft windows server 2019before 10.0.17763.7919
• microsoft windows server 2022before 10.0.20348.4294
• microsoft windows server 2022 23h2before 10.0.25398.1913
• microsoft windows server 2025up to 10.0.26100.6899 inclusive

Versions reported by the vendor

Affected version ranges reported by the assigning authority (microsoft). Independent of NVD's CPE analysis and usually ahead of it.

• Microsoft Windows 10 Version 1507

  • 10.0.10240.0 and later · before 10.0.10240.21161affected

• Microsoft Windows 10 Version 1607

  • 10.0.14393.0 and later · before 10.0.14393.8519affected

• Microsoft Windows 10 Version 1809

  • 10.0.17763.0 and later · before 10.0.17763.7919affected

• Microsoft Windows 10 Version 21H2

  • 10.0.19044.0 and later · before 10.0.19044.6456affected

• Microsoft Windows 10 Version 22H2

  • 10.0.19045.0 and later · before 10.0.19045.6456affected

• Microsoft Windows 11 version 22H2

  • 10.0.22621.0 and later · before 10.0.22621.6060affected

• Microsoft Windows 11 version 22H3

  • 10.0.22631.0 and later · before 10.0.22631.6060affected

• Microsoft Windows 11 Version 23H2

  • 10.0.22631.0 and later · before 10.0.22631.6060affected

• Microsoft Windows 11 Version 24H2

  • 10.0.26100.0 and later · before 10.0.26100.6899affected

• Microsoft Windows 11 Version 25H2

  • 10.0.26200.0 and later · before 10.0.26200.6899affected

• Microsoft Windows Server 2008 R2 Service Pack 1

  • 6.1.7601.0 and later · before 6.1.7601.27974affected

• Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)

  • 6.1.7601.0 and later · before 6.1.7601.27974affected

Other highest-scoring records for the same primary product.

• CVE-2021-34527Windows Print Spooler Remote Code Execution VulnerabilityKEV
  95Now
• CVE-2021-40444Microsoft MSHTML Remote Code Execution VulnerabilityKEV
  94Now
• CVE-2025-33053Internet Shortcut Files Remote Code Execution VulnerabilityKEV
  91Now
• CVE-2023-36025Windows SmartScreen Security Feature Bypass VulnerabilityKEV
  91Now
• CVE-2022-30190Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityKEV
  91Now
• CVE-2017-8543Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, WinKEV
  91Now

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

After a memory region is freed, another reference pointing to it is still used. By then, the same region may have been allocated for different data.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1free(dev->buf);2/* ... another thread is still running ... */3process(dev->buf);

1lock(&dev->lock);2free(dev->buf);3dev->buf = NULL;4unlock(&dev->lock);

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.