CVE-2026-13811

CVE-2026-13811 describes a Use-After-Free in the IME of Google Chrome, allowing remote code execution via a crafted HTML page in Chrome versions prior to 150.0.7871.47 (Chromium). The connected Chrome update note indicates fixes were delivered in the stable channel update for Chrome 150/151, with...

EUVD-2016-8080

Malware in sbrugna...

EUVD-2013-3791

Malware in sbrugna...

ASB-A-331730488

In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and motion events to the default IME due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction ...

CVE-2020-0707

An elevation of privilege vulnerability exists when the Windows IME improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows IME Elevation of Privilege Vulnerability'...

CVE-2024-49079

Input Method Editor IME Remote Code Execution Vulnerability...

Design/Logic Flaw

Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet Explorer from the IME toolbar, aka "Chinese IME Vulnerability."...