Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...

CVE-2025-11711

There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable. This vulnerability was fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4...

Microsoft Inbox COM Objects 资源管理错误漏洞

Microsoft Inbox COM Objects is a built-in COM component of the Windows operating system from the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Inbox COM Objects, which can be exploited by an attacker to execute arbitrary code...

PT-2025-42067

Name of the Vulnerable Software and Affected Versions versions prior to 2025-58731 Description A use after free issue exists in Inbox COM Objects, potentially allowing an unauthorized attacker to execute code locally. Recommendations At the moment, there is no information about a newer version th...

PT-2025-42070

Name of the Vulnerable Software and Affected Versions versions prior to 2025 affected versions not specified Description A use-after-free condition exists in Inbox COM Objects. This allows an unauthorized attacker to execute code locally. Recommendations At the moment, there is no information abo...

CVE-2025-58731: Use After Free

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...

CVE-2025-58734: Use After Free

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...

Microsoft Inbox COM Objects 资源管理错误漏洞

Microsoft Inbox COM Objects is a built-in COM component for Windows operating systems from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Inbox COM Objects, which can be exploited by an attacker to remotely execute code...

PT-2025-42066

Name of the Vulnerable Software and Affected Versions versions prior to 2025 affected versions not specified Description A use-after-free condition exists in Inbox COM Objects. This allows an unauthorized attacker to execute code locally. The issue involves the improper handling of memory,...

PT-2025-41899

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 144 Firefox ESR versions prior to 115.29 Firefox ESR versions prior to 140.4 Thunderbird versions prior to 144 Thunderbird versions prior to 140.4 Description A flaw existed that allowed modification of JavaScript...

Microsoft Windows Internet Information Services（IIS）和Microsoft Inbox COM Objects 资源管理错误漏洞

Microsoft Windows Internet Information Services IIS and Microsoft Inbox COM Objects are both products of Microsoft Corporation.Microsoft Windows Internet Information Services is a web server for the Windows Server platform. Information Services is a web server for the Windows Server...

Microsoft Inbox COM Objects 资源管理错误漏洞

Microsoft Inbox COM Objects is a built-in COM component for Windows operating systems from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Inbox COM Objects, which can be exploited by an attacker to remotely execute code...

CVE-2025-59282: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Inbox COM Objects allows an unauthorized attacker to execute code locally...

CVE-2025-58738: Use After Free

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...

CVE-2025-58736: Use After Free

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...

CVE-2025-58735: Use After Free

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...

CVE-2025-58733: Use After Free

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...

CVE-2025-58732: Use After Free

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...

Security Vulnerabilities fixed in Firefox ESR 115.29 — Mozilla

A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised...