CVE-2025-59282

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Inbox COM Objects allows an unauthorized attacker to execute code locally.

References

https://www.vicarius.io/vsociety/posts/cve-2025-59282-mitigation-script-race-condition-in-microsoft-inbox-com-objects

https://www.vicarius.io/vsociety/posts/cve-2025-59282-detection-script-race-condition-in-microsoft-inbox-com-objects

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59282

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS