CNNVD-202510-1799 Information
CNNVD ID
CNNVD-202510-1799
Related CVE
- CNNVD Published: 2025-10-14
Description (Chinese)
Microsoft Windows Internet Information Services（IIS）和Microsoft Inbox COM Objects都是美国微软（Microsoft）公司的产品。Microsoft Windows Internet Information Services是一款适用于Windows Server平台的Web服务器。Microsoft Inbox COM Objects是一个Windows操作系统内置的COM组件。 Microsoft Windows Internet Information Services（IIS）和Microsoft Inbox COM Objects存在资源管理错误漏洞，该漏洞源于攻击者利用该漏洞可以远程执行代码。
Description (English)
Microsoft Windows Internet Information Services (IIS) and Microsoft Inbox COM Subjects are products of Microsoft USA. Microsoft Windows Internet Information Services is a Web server that applies to Windows Server platforms. Microsoft Inbox COM Subjects is a COM component in the Windows operating system. Microsoft Windows Internet Information Services (IIS) and Microsoft Inbox COM Objects have a resource management error gap, which stems from the fact that the assailants use it to perform the code remotely.
Hazard Level
Medium
Vulnerability Type
资源管理错误
Affected Vendor
微软
Published
2025-10-14
Last Modified
2026-02-24
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59282
Patch
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59282
Share on: