A vulnerability, which was classified as critical, was found in Microsoft Windows SDK. Affected by this vulnerability is an unknown functionality of the component Inbox COM Objects. Executing a manipulation can lead to use after free.

This vulnerability is handled as CVE-2026-21219. It is possible to launch the attack on the local host. There is not any exploit available.

It is best practice to apply a patch to resolve this issue.