cve 2025 59282

Microsoft’s October security roll-up closed a critical local code-execution pathway in Internet Information Services (IIS) tied to legacy Inbox COM Objects after the vendor assigned CVE-2025-59282 to a race‑condition / use‑after‑free defect that can be abused to run arbitrary code when the...

Microsoft’s October security roll-up includes a cluster of Inbox COM object fixes that together close a set of local code-execution and memory-corruption bugs; one of the more consequential entries is CVE-2025-59282, an IIS-related Inbox COM Objects (Global Memory) vulnerability that Microsoft...