CVE-2025-49687

Out-of-bounds read in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

[SECURITY] Fedora 41 Update: helix-25.01.1-6.fc41

A Kakoune / Neovim inspired editor, written in Rust...

[SECURITY] Fedora 42 Update: helix-25.01.1-6.fc42

A Kakoune / Neovim inspired editor, written in Rust...

CVE-2025-49687

Out-of-bounds read in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

CVE-2025-49687

Out-of-bounds read in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

CVE-2025-47991

Use after free in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

CVE-2025-47991

Use after free in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

CVE-2025-47972

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges over a network...

CVE-2025-47972

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges over a network...

CVE-2025-47991 Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

...

CVE-2025-47991

CVE-2025-47991 maps to a Microsoft IME (Input Method Editor) use-after-free vulnerability reported as a resource-management error that can enable local privilege escalation. Connected CNVD-2025-16874 corroborates an IME privilege-elevation risk from Microsoft IME. Publicly stated impact in the CV...

CVE-2025-47991 Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

...

CVE-2025-49687

Technical details about CVE-2025-49687 (affected products, root cause, impact, fixes) are not provided in the supplied documents. Monitor for updates and advisories.

CVE-2025-49687 Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

...

CVE-2025-47972 Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

...

CVE-2025-47972

CVE-2025-47972 affects the Microsoft Input Method Editor (IME) in Windows. Connected records reflect a high-severity, privilege-escalation risk with CVSS v3.1 base score 8.0 (attack vector: network; impact: confidentiality, integrity, and availability high; privileges required: low; user interact...

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

Out-of-bounds read in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges over a network...

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

Use after free in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

Malware in assets-atlas-editor

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...