HighCVSS 7.0
EPSS 0.38%
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
Product
2 published CVES affecting Microsoft windows sdk, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
Improper access control in Windows SDK allows an authorized attacker to elevate privileges locally.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.