CVE-2025-49687: Out-of-bounds Read

Out-of-bounds read in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

PT-2025-28523 · Microsoft · Input Method Editor +1

Name of the Vulnerable Software and Affected Versions: Microsoft Input Method Editor IME affected versions not specified Description: The issue is related to a use after free condition in the Microsoft Input Method Editor IME, which allows an authorized attacker to elevate privileges locally. Thi...

PT-2025-28585 · Microsoft · Input Method Editor +1

Name of the Vulnerable Software and Affected Versions: Microsoft Input Method Editor IME affected versions not specified Description: The issue is related to an out-of-bounds read in the Microsoft Input Method Editor IME, which allows an authorized attacker to elevate privileges locally...

CVE-2021-39748

In InputMethodEditor, there is a possible way to access some files accessible to Settings due to an unsafe PendingIntent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2019-15344

The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.8. This app contains an exported service named...

CVE-2019-15389

The Haier A6 Android device with a build fingerprint of Haier/A6/A6:8.1.0/O11019/1534219877:userdebug/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.1.13. This app contains an exported service named...

February 25, 2025—KB5052077 (OS Build 19045.5555) Preview

None None...

The vulnerability of the Input Method Editor (IME) component of Microsoft Windows allows a hacker to execute arbitrary code.

The vulnerability of the Input Method Editor IME component in Microsoft Windows systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2024-49079

Input Method Editor IME Remote Code Execution Vulnerability...

CVE-2024-49079 Input Method Editor (IME) Remote Code Execution Vulnerability

...

CVE-2024-49079

Technical details for CVE-2024-49079 are not provided in the supplied documents. Monitor for updates from Microsoft, NVD, CVE List, and other official sources as disclosures evolve.

CVE-2024-49079 Input Method Editor (IME) Remote Code Execution Vulnerability

...

Input Method Editor (IME) Remote Code Execution Vulnerability

...

PT-2024-9526 · Unknown +1 · Input Method Editor +1

Name of the Vulnerable Software and Affected Versions: Input Method Editor IME affected versions not specified Description: The issue is related to a remote code execution problem in the Input Method Editor IME component, which can be exploited by remote attackers to execute arbitrary code on the...

Microsoft Input Method Editor 资源管理错误漏洞

Microsoft Input Method Editor IME is a software component from Microsoft Corporation that enables users to enter text in languages that cannot be easily represented on a standard QWERTY keyboard. A resource management error vulnerability exists in Microsoft Input Method Editor. An attacker could...

October 8, 2024—KB5044288 (OS Build 25398.1189)

None None...

July 9, 2024—KB5040438 (OS Build 25398.1009)

None None...

July 9, 2024—KB5040437 (OS Build 20348.2582)

None None...

June 25, 2024—KB5039299 (OS Build 19045.4598) Preview

None None...

SUSE CVE-2017-7752

A use-after-free vulnerability during specific user interactions with the input method editor IME in some languages due to how events are handled. This results in a potentially exploitable crash but would require specific user interaction to trigger. This vulnerability affects Firefox 54, Firefox...