MAL-2025-48449 Malicious code in monzo-com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39349f1d7e9c11249daccdfa4fd66aece003c79426359c49af2c3d56c341d195 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Microsoft Inbox COM Objects Code Execution Vulnerability

Microsoft Inbox COM Objects is a built-in COM component of the Windows operating system from the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Inbox COM Objects, which can be exploited by an attacker to execute arbitrary code on a system...

CVE-2025-58725

Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally...

CVE-2025-58734

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...

CVE-2025-9437

A security issue exists within the Studio 5000 Logix Designer add-on profile AOP for the ArmorStart Classic distributed motor controller, resulting in denial-of-service. This vulnerability is possible due to the input of invalid values into Component Object Model COM methods...

CVE-2025-59282

Concurrent execution using shared resource with improper synchronization 'race condition' in Inbox COM Objects allows an unauthorized attacker to execute code locally...

CVE-2025-58738

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...

CVE-2025-58731

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...

CVE-2025-58735

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...

CVE-2025-58732

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...

CVE-2025-58734

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...

CVE-2025-58730

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...

CVE-2025-58730

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...

CVE-2025-58725

Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally...

CVE-2025-58725

Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally...

CVE-2025-58736 Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

...

CVE-2025-58733 Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

...

CVE-2025-58734 Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

...

CVE-2025-58733

CVE-2025-58733 corresponds to a use-after-free in Inbox COM Objects on Windows that enables local code execution. Connected sources confirm Inbox COM Objects as the vulnerable component and describe the impact as arbitrary code execution by a local attacker. Public advisories from Microsoft and C...

CVE-2025-58730 Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

...