Microsoft has confirmed and patched CVE-2025-58734 — an Inbox COM Objects (Global Memory) vulnerability that can be leveraged for local remote code execution and elevation of privilege in specific hosting contexts, and administrators must treat it as a high-priority fix for exposed and...
Microsoft has recorded CVE-2025-58725 as an elevation-of-privilege vulnerability in the Windows COM+ Event System (Inbox COM) / COM-based handler family that can allow a locally authorized attacker to escalate privileges on affected Windows hosts; administrators should treat this as a...
com heap overflow
com plus event system
cve 2025 58725
cve-2025-58725
elevation of privilege
eop vulnerability
inboxcom
local privilege escalation
patch management
privilege escalation
windows security
Microsoft’s advisory for CVE-2025-58732 identifies an Inbox COM Objects (Global Memory) Remote Code Execution vulnerability that Microsoft has grouped with several other Inbox COM fixes; the vendor’s remediation and corroborating industry reporting make the flaw a confirmed, high-priority local...