November 30, 2020—KB4586853 (OS Builds 19041.662 and 19042.662) Preview

None None...

Virtual memory size of Explorer increases when you open programs continuously in Windows 8.1 or Windows Server 2012 R2

Virtual memory size of Explorer increases when you open programs continuously in Windows 8.1 or Windows Server 2012 R2 This article describes a memory leak issue in the Explorer.exe process in Windows 8.1, Windows RT 8.1, or Windows Server 2012 R2. An update is available to fix this issue. Before...

CVE-2020-0707

An elevation of privilege vulnerability exists when the Windows IME improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows IME Elevation of Privilege Vulnerability'...

Privilege escalation

An elevation of privilege vulnerability exists when the Windows IME improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows IME Elevation of Privilege Vulnerability'...

CVE-2020-0707

CVE-2020-0707 is a Windows IME privilege-elevation vulnerability arising from improper memory handling in Windows IME. The issue enables local privilege escalation when an attacker gains execution on the target system and runs a specially crafted application. Connected sources corroborate the Win...

CVE-2020-0707

An elevation of privilege vulnerability exists when the Windows IME improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows IME Elevation of Privilege Vulnerability'...

Windows IME Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows IME improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update...

January 23, 2020—KB4534308 (OS Build 17134.1276)

None None...

CVE-2017-7752

A use-after-free vulnerability during specific user interactions with the input method editor IME in some languages due to how events are handled. This results in a potentially exploitable crash but would require specific user interaction to trigger. This vulnerability affects Firefox 54, Firefox...

September 10, 2019—KB4516066 (OS Build 16299.1387)

None None...

Update for Windows 8.1 and Windows Server 2012 R2: April 25, 2019

Update for Windows 8.1 and Windows Server 2012 R2: April 25, 2019 Summary This update includes the quality improvements from KB4493467, in addition to new Japanese Era related changes. Key changes include: Updates the NLS registry to support the new Japanese Era. Addresses an issue that causes th...

Update for Windows 7 SP1 and Windows Server 2008 R2 SP1: April 25, 2019

Update for Windows 7 SP1 and Windows Server 2008 R2 SP1: April 25, 2019 Summary This update includes the quality improvements from KB4493448, in addition to new Japanese Era related changes. Key changes include: Updates the NLS registry to support the new Japanese Era. Addresses an issue that...

User-After-Free

Mozilla Firefox is vulnerable to use-after-free vulnerability. This vulnerability is caused when handling events while specific user interaction occurs with the input method editor IME. An unauthenticated, remote attacker can exploit this to cause a denial of service condition or the execution of...

May 1, 2019—KB4501835 (OS Build 17763.439)

None None...

July 10, 2018—KB4338829 (OS Build 10240.17914)

None None...

CVE-2017-7752

CVE-2017-7752 is a use-after-free vulnerability triggered by specific user interactions with the input method editor (IME) in certain languages. The flaw is reported to affect Mozilla Firefox versions before 54, Firefox ESR before 52.2, and Thunderbird before 52.2. The impacted component is tied ...

May 17, 2018—KB4103722 (OS Build 15063.1112)

None None...

May 8, 2018—KB4103716 (OS Build 10240.17861)

None None...

May 8, 2018—KB4103725 (Monthly Rollup)

None None...

Google to Block Third-Party Software from Injecting Code into Chrome Browser

To improve performance and reduce crashes caused by third-party software on Windows, Google Chrome, by mid-2018, will no longer allow outside applications to run code within its web browser. If you are unaware, many third-party applications, like accessibility or antivirus software, inject code...