219 matches found
PT-2026-54088
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description A use after free issue exists in the Input Method Editor IME, a system that allows users to enter complex characters using a keyboard. This flaw allows a remote attacker to execute...
October 14, 2025—KB5066780 (OS Build 25398.1913)
None None...
[SECURITY] Fedora 42 Update: fcitx5-chewing-5.1.9-1.fc42
fcitx5-chewing is a Chewing Wrapper for Fcitx. Chewing is a set of free intelligent Chinese Phonetic IME...
EUVD-2017-17540
Malware in sbrugna...
EUVD-2017-17516
Malware in sbrugna...
EUVD-2020-2200
Malware in sbrugna...
EUVD-2017-11404
Malware in sbrugna...
EUVD-2016-8080
Malware in sbrugna...
EUVD-2013-3791
Malware in sbrugna...
EUVD-2011-2004
Malware in sbrugna...
CVE-2025-26450
In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and motion events to the default IME due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction ...
CVE-2025-26450
In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and motion events to the default IME due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction ...
CVE-2025-26450
In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and motion events to the default IME due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction ...
CVE-2025-26450
A high-severity Elevation of Privilege (EoP) vulnerability exists in the Android Framework component within IInputMethodSessionWrapper.java. Due to a missing permission check in the onInputEvent function, an untrusted application can inject key and motion events into the default Input Method Edit...
CVE-2025-26450: Missing Authorization
In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and motion events to the default IME due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction ...
CVE-2025-49687 Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
...
CVE-2025-47972 Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
...
CVE-2025-47972: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges over a network...