← All advisories

High severity7.0NVD Advisory· Published Jan 13, 2026· Updated Jun 17, 2026

CVE-2026-21219

CVE-2026-21219

Description

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

Affected products

3

Microsoft/Windows Software Development Kit
cpe:2.3:a:microsoft:windows_software_development_kit:*:*:*:*:*:*:*:*
Range: >=10.0.26100,<10.0.26100.7463
Microsoft/Inbox COM Objectsllm-fuzzy
Microsoft/Windowscpe-rescue
Range: 26100

Patches

Vulnerability mechanics

References

1

msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21219nvdVendor Advisory

News mentions

0

No linked articles in our index yet.