CVE-2026-21219 Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally

Description

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

Affected products and versions

Product	Affected versions	Fixed in
Windows SDK 10.0	earliest → < 10.0.26100.7463	10.0.26100.7463

Other CVEs of Windows SDK

The 2 CVEs of Windows SDK →

CVE-2025-47962 Improper access control in Windows SDK allows an authorized attacker to elevate privileges locally 7.8 High