425 matches found
CVE-2025-26450
In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and motion events to the default IME due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction ...
CVE-2025-26450
In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and motion events to the default IME due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction ...
CVE-2025-26450
In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and motion events to the default IME due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction ...
PT-2025-36021
Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A flaw exists in IInputMethodSessionWrapper.java within the Android operating system. An untrusted application may inject key and motion events into the default Input Method Editor IME due ...
August 12, 2025—KB5063880 (OS Build 20348.4052)
None None...
Microsoft Input Method Editor Resource Management Error Vulnerability
Microsoft Input Method Editor IME is a software component from Microsoft Corporation that enables users to enter text in languages that cannot be easily represented on a standard QWERTY keyboard. A security vulnerability exists in Microsoft Input Method Editor IME. An attacker could exploit the...
Microsoft Input Method Editor Buffer Overflow Vulnerability
Microsoft Input Method Editor IME is a software component from Microsoft Corporation that enables users to enter text in languages that cannot be easily represented on a standard QWERTY keyboard. A security vulnerability exists in Microsoft Input Method Editor IME. An attacker could exploit the...
The vulnerability of the Input Method Editor (IME) component in Windows operating systems, which allows attackers to exploit their privileges
The vulnerability of the Input Method Editor IME component in Windows operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Input Method Editor (IME) component of Microsoft Windows, which allows a hacker to gain elevated privileges
The vulnerability of the Input Method Editor IME component in Microsoft Windows is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...
The vulnerability of the Input Method Editor (IME) component of Microsoft Windows, which allows a hacker to gain elevated privileges
The vulnerability of the Input Method Editor IME component in Microsoft Windows lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...
CVE-2025-47991
Use after free in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...
CVE-2025-47972
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges over a network...
CVE-2025-49687
Out-of-bounds read in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...
CVE-2025-49687
Out-of-bounds read in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...
CVE-2025-49687
Out-of-bounds read in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...
CVE-2025-47991
Use after free in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...
CVE-2025-47991
Use after free in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...
CVE-2025-47972
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges over a network...