SUSE CVE-2026-17975

Inappropriate implementation in IME in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-13811

Use after free in IME in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-13811

A use after free vulnerability exists in the IME component of Google Chrome (prior to version 150.0.7871.47), as well as in Microsoft Edge . A remote attacker can exploit this flaw via a crafted HTML page to execute arbitrary code within a sandbox or cause a service failure. Remediation is availa...

EUVD-2016-8080

Malware in sbrugna...

EUVD-2013-3791

Malware in sbrugna...

ASB-A-331730488

In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and motion events to the default IME due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction ...

CVE-2020-0707

An elevation of privilege vulnerability exists when the Windows IME improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows IME Elevation of Privilege Vulnerability'...

CVE-2024-49079

Input Method Editor IME Remote Code Execution Vulnerability...

Design/Logic Flaw

Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet Explorer from the IME toolbar, aka "Chinese IME Vulnerability."...