Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

Use after free in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

Microsoft Input Method Editor 缓冲区错误漏洞

Microsoft Input Method Editor IME is a software component from Microsoft Corporation that enables users to enter text in languages that cannot be easily represented on a standard QWERTY keyboard. A security vulnerability exists in Microsoft Input Method Editor IME. An attacker could exploit the...

Microsoft Input Method Editor 资源管理错误漏洞

Microsoft Input Method Editor IME is a software component from Microsoft Corporation that enables users to enter text in languages that cannot be easily represented on a standard QWERTY keyboard. A security vulnerability exists in Microsoft Input Method Editor IME. An attacker could exploit the...

Microsoft Input Method Editor 竞争条件问题漏洞

Microsoft Input Method Editor IME is a software component from Microsoft Corporation that enables users to enter text in languages that cannot be easily represented on a standard QWERTY keyboard. A competitive conditions issue vulnerability exists in Microsoft Input Method Editor. An attacker cou...

PT-2025-28585 · Microsoft · Input Method Editor +1

Name of the Vulnerable Software and Affected Versions: Microsoft Input Method Editor IME affected versions not specified Description: The issue is related to an out-of-bounds read in the Microsoft Input Method Editor IME, which allows an authorized attacker to elevate privileges locally...

PT-2025-28523 · Microsoft · Input Method Editor +1

Name of the Vulnerable Software and Affected Versions: Microsoft Input Method Editor IME affected versions not specified Description: The issue is related to a use after free condition in the Microsoft Input Method Editor IME, which allows an authorized attacker to elevate privileges locally. Thi...

PT-2025-28510 · Microsoft · Input Method Editor +1

Name of the Vulnerable Software and Affected Versions: Microsoft Input Method Editor IME affected versions not specified Description: The issue is related to a race condition due to improper synchronization when using a shared resource, allowing an authorized attacker to elevate privileges over a...

[SECURITY] Fedora 42 Update: fcitx5-qt-5.1.9-7.fc42

Qt library and IM module for fcitx5...

CVE-2024-47294

Access permission verification vulnerability in the input method framework module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-56953

An issue in Baidu China Co Ltd Baidu Input Method iOS version v12.6.13 allows attackers to access user information via supplying a crafted link...

CVE-2023-39384

Vulnerability of incomplete permission verification in the input method module. Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2023-21338

In Input Method, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...

CVE-2023-21192

In setInputMethodWithSubtypeIdLocked of InputMethodManagerService.java, there is a possible way to setup input methods that are not enabled due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

CVE-2023-21337

In InputMethod, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21336

In Input Method, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2021-39748

In InputMethodEditor, there is a possible way to access some files accessible to Settings due to an unsafe PendingIntent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2019-15344

The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.8. This app contains an exported service named...

CVE-2019-15389

The Haier A6 Android device with a build fingerprint of Haier/A6/A6:8.1.0/O11019/1534219877:userdebug/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.1.13. This app contains an exported service named...

February 25, 2025—KB5052077 (OS Build 19045.5555) Preview

None None...

CVE-2024-56953

An issue in Baidu China Co Ltd Baidu Input Method iOS version v12.6.13 allows attackers to access user information via supplying a crafted link...