Описание
Concurrent execution using shared resource with improper synchronization ('race condition') in Inbox COM Objects allows an unauthorized attacker to execute code locally.
Concurrent execution using shared resource with improper synchronization ('race condition') in Inbox COM Objects allows an unauthorized attacker to execute code locally.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2025-59282
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59282
- https://www.vicarius.io/vsociety/posts/cve-2025-59282-detection-script-race-condition-in-microsoft-inbox-com-objects
- https://www.vicarius.io/vsociety/posts/cve-2025-59282-mitigation-script-race-condition-in-microsoft-inbox-com-objects
Связанные уязвимости
CVSS3: 7
nvd
около 1 года назад
Concurrent execution using shared resource with improper synchronization ('race condition') in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVSS3: 7
msrc
около 1 года назад
Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
CVSS3: 7
fstec
около 1 года назад
Уязвимость компонента Internet Information Services операционных систем Windows, позволяющая нарушителю выполнить произвольный код