185 matches found
CVE-2025-26450
CVE-2025-26450 affects Android-related code in onInputEvent of IInputMethodSessionWrapper.java. The issue allows an untrusted app to inject key and motion events to the default IME due to a missing permission check, enabling local privilege escalation with no additional privileges required. User ...
CVE-2025-49687 Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
...
CVE-2025-47972 Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
...
ASB-A-331730488
In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and motion events to the default IME due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction ...
CVE-2020-0707
An elevation of privilege vulnerability exists when the Windows IME improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows IME Elevation of Privilege Vulnerability'...
February 25, 2025—KB5052077 (OS Build 19045.5555) Preview
None None...
CVE-2024-49079
Input Method Editor IME Remote Code Execution Vulnerability...
Patch Tuesday - October 2024
Microsoft is addressing 118 vulnerabilities this October 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for five of the vulnerabilities published today, although it does not rate any of these as critical yet. Of those five, Microsoft lists two as...
October 8, 2024—KB5044281 (OS Build 20348.2762)
None None...
July 9, 2024—KB5040497 (Monthly Rollup)
None None...
July 9, 2024—KB5040490 (Security-only update)
None None...
June 28, 2024—KB5039304 (OS Build 26100.1000) Preview
None None...
February 29, 2024—KB5034843 (OS Build 19045.4123) Preview
None None...
What does Generic Client IME feature do in a Citrix Virtual Desktop/App session?
The Generic Client IME feature offering the best input experience yet for Citrix customers...
Keyboard layout sync failures due to Microsoft API limitation
Symptom 1: In a Windows Server VDA session the keyboard layout might not sync with the client keyboard layout when launching session with the "Sync only once - when the session launches" in the Citrix Workspace App Windows/Linux/Mac keyboard setting. Symptom 2: In a Windows 10/11, Windows Server...
February 14, 2023—KB5022842 (OS Build 20348.1547)
None None...
January 19, 2023—KB5019274 (OS Build 22000.1516) Preview
None None...
November 29, 2022—KB5020044 (OS Build 22621.900) Preview
None None...
Cannot activate Microsoft Pinyin IME in Windows server 2016/2019/2022
Cannot activate Microsoft Pinyin IME in Windows server 2016/2019/2022 VDA if client keyboard layout set “sync only once” mode Following are the details of the error, 1. VDA OS is a Windows server 2016/2019/2022 English version. 2. CWA Windows set the keyboard layout to “Sync only once – when the...
Microsoft IME Japanese Privilege Escalation Vulnerability
Microsoft Input Method Editor IME Japanese is a keyboard with Japanese characters that can be enabled on Windows systems as it is included by default with the default set as disabled. IME Japanese contains an unspecified vulnerability when IMJPDCT.EXE IME for Japanese is installed which allows...