You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
cve 2025 58730
About this tag
CVE-2025-58730 is a memory-corruption vulnerability in Microsoft's Inbox COM Objects, confirmed by Microsoft as part of a family of flaws involving race conditions and use-after-free failure modes. It was remediated in the October 2025 security roll-up. The vulnerability can enable local remote-code-execution (RCE) in certain attack chains, particularly affecting document-processing hosts, developer tooling, and IIS-facing services. Administrators should prioritize applying the October 2025 patch to mitigate risks from legacy COM reuse and shared global memory issues.
Microsoft has confirmed a class of memory-corruption flaws in its Inbox COM Objects that include a local remote-code-execution (RCE)–style impact for certain realistic attack chains; CVE-2025-58730 is one member of that family and was remediated in Microsoft’s October 2025 security roll‑up, but...