26 matches found
CVE-2026-51990
An issue in Sogou Sogou Input Method 16.3.0.3498 fixed in 16.3.0.3498 allows a remote attacker to execute arbitrary code via the bizhelper.exe component...
EUVD-2026-80932
An issue in Sogou Sogou Input Method 16.3.0.3498 fixed in 16.3.0.3498 allows a remote attacker to execute arbitrary code via the bizhelper.exe component...
CVE-2026-51990
The Sogou Input Method for Windows (versions prior to 16.3.0.3498 ) is vulnerable to a remote code execution (RCE) attack chain triggered by a specially crafted link. The attack begins when a user clicks a sgbiz: URI, causing the biz_helper.exe component to pass unvalidated command-line arguments...
CVE-2026-51990
An issue in Sogou Sogou Input Method 16.3.0.3498 fixed in 16.3.0.3498 allows a remote attacker to execute arbitrary code via the bizhelper.exe component...
CVE-2026-51990: Improper Control of Generation of Code
An issue in Sogou Sogou Input Method 16.3.0.3498 fixed in 16.3.0.3498 allows a remote attacker to execute arbitrary code via the bizhelper.exe component...
CVE-2026-51990
An issue in Sogou Sogou Input Method 16.3.0.3498 fixed in 16.3.0.3498 allows a remote attacker to execute arbitrary code via the bizhelper.exe component...
PT-2026-89805
Name of the Vulnerable Software and Affected Versions Sogou Input Method versions prior to 16.3.0.3498 Description A critical issue in the Windows version of Sogou Input Method allows a remote attacker to execute arbitrary code via a one-click attack. The flaw is exploited by the UNC3569 threat...
VulnCheck KEV: CVE-2026-51990
Sogou Input Method contains a chain of three weaknesses that, if successfully exploited, could allow remote code execution. An attacker could exploit this vulnerability by convincing a user to click a specially crafted link...
EUVD-2024-53469
Malicious code in bioql PyPI...
CVE-2024-56963
An issue in Beijing Sogou Technology Development Co., Ltd Sogou Input iOS 12.2.0 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2024-56963
An issue in Beijing Sogou Technology Development Co., Ltd Sogou Input iOS 12.2.0 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2024-56963
An issue in Beijing Sogou Technology Development Co., Ltd Sogou Input iOS 12.2.0 allows attackers to access sensitive user information via supplying a crafted link...
PT-2025-3364 · Beijing Sogou Technology Development Co. · Sogou Input
Name of the Vulnerable Software and Affected Versions: Beijing Sogou Technology Development Co., Ltd Sogou Input version 12.2.0 Description: An issue in the software allows attackers to access sensitive user information via supplying a crafted link. This is achieved by providing a manipulated lin...
CVE-2024-56963
Sogou Input version 12.2.0 for iOS, developed by Beijing Sogou Technology Development Co., Ltd, is vulnerable to a flaw that allows attackers to access sensitive user information . The vulnerability is triggered by providing a crafted/manipulated link , which enables unauthorized access to confid...
CVE-2024-56963
An issue in Beijing Sogou Technology Development Co., Ltd Sogou Input iOS 12.2.0 allows attackers to access sensitive user information via supplying a crafted link...
Sogou Input 安全漏洞
Sogou Input is an input method from the Chinese company Sogou Sogou. A security vulnerability exists in Sogou Input iOS version 12.2.0, which originates from an attacker being able to obtain sensitive user information by providing a carefully crafted link...
CVE-2024-56963: URL Redirection to Untrusted Site
An issue in Beijing Sogou Technology Development Co., Ltd Sogou Input iOS 12.2.0 allows attackers to access sensitive user information via supplying a crafted link...
Sogou Input Method suffers from a local power lifting vulnerability
Sogou Input Method is a Chinese character input method tool. A local privilege elevation vulnerability exists in Sogou Input Method. An attacker can exploit the vulnerability to cause a local privilege boost via a symbolic link...
Sogou Input Method (Windows client) suffers from dll hijacking vulnerability
Sogou Input Method is a Chinese character input method tool launched in June 2006 by Sogou Sogou. A dll hijacking vulnerability exists in Sogou Input Method Windows client. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...
Sogou Input Method of Beijing Sogou Information Service Co.
Sogou Input Method is a Chinese character input method tool launched in June 2006 by Sogou Sogou. Sogou Input Method has a dll hijacking vulnerability, which can be exploited by attackers to remotely control a user's computer or implant a Trojan horse...