CVE-2025-47991

CVE-2025-47991 maps to a Microsoft IME (Input Method Editor) use-after-free vulnerability reported as a resource-management error that can enable local privilege escalation. Connected CNVD-2025-16874 corroborates an IME privilege-elevation risk from Microsoft IME. Publicly stated impact in the CV...

CVE-2025-49687

Technical details about CVE-2025-49687 (affected products, root cause, impact, fixes) are not provided in the supplied documents. Monitor for updates and advisories.

CVE-2025-49687 Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

...

CVE-2025-47972 Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

...

CVE-2025-47972

CVE-2025-47972 affects the Microsoft Input Method Editor (IME) in Windows. Connected records reflect a high-severity, privilege-escalation risk with CVSS v3.1 base score 8.0 (attack vector: network; impact: confidentiality, integrity, and availability high; privileges required: low; user interact...

Description of the security update for Visual Studio 2015 Update 3: July 8, 2025 (KB5063035)

Description of the security update for Visual Studio 2015 Update 3: July 8, 2025 KB5063035 Applies To Visual Studio 2015 Update 3 Applies to: All Visual Studio 2015 Update 3 editions except Build Tools Summary An elevation of privilege vulnerability exists in the Diagnostics Hub Standard Collecto...

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges over a network...

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

Out-of-bounds read in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

Description of the security update for Office Online Server: July 8, 2025 (KB5002740)

Description of the security update for Office Online Server: July 8, 2025 KB5002740 Applies To Office Online Server Summary This security update resolves a Microsoft Excel remote code execution vulnerability, Microsoft Excel information disclosure vulnerability, and Microsoft Office remote code...

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

Use after free in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

CVE-2025-20694

The Bluetooth driver's firmware microprogramming software on MediaTek chips is vulnerable to a buffer underwrite (violation of the buffer's initial boundary) caused by an uncaught exception . This flaw allows a remote attacker to cause a system crash , resulting in a denial of service without req...

Microsoft Input Method Editor resource management vulnerability

Microsoft Input Method Editor IME is a software component from Microsoft Corporation that enables users to enter text in languages that cannot be easily represented on a standard QWERTY keyboard. A security vulnerability exists in Microsoft Input Method Editor IME. An attacker could exploit the...

Microsoft Input Method Editor buffer error vulnerability

Microsoft Input Method Editor IME is a software component from Microsoft Corporation that enables users to enter text in languages that cannot be easily represented on a standard QWERTY keyboard. A security vulnerability exists in Microsoft Input Method Editor IME. An attacker could exploit the...

Microsoft Input Method Editor vulnerability due to competition conditions

Microsoft Input Method Editor IME is a software component from Microsoft Corporation that enables users to enter text in languages that cannot be easily represented on a standard QWERTY keyboard. A competitive conditions issue vulnerability exists in Microsoft Input Method Editor. An attacker cou...

PT-2025-28510 · Microsoft · Input Method Editor +1

Name of the Vulnerable Software and Affected Versions: Microsoft Input Method Editor IME affected versions not specified Description: The issue is related to a race condition due to improper synchronization when using a shared resource, allowing an authorized attacker to elevate privileges over a...

A Formal Refutation of the Blockchain Trilemma

The so-called blockchain trilemma asserts the impossibility of simultaneously achieving scalability, security, and decentralisation within a single blockchain protocol. In this paper, we formally refute that proposition. Employing predicate logic, formal automata theory, computational complexity...

CVE-2025-49687: Out-of-bounds Read

Out-of-bounds read in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

CVE-2025-47991: Use After Free

Use after free in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

CVE-2025-47972: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges over a network...

PT-2025-28585 · Microsoft · Input Method Editor +1

Name of the Vulnerable Software and Affected Versions: Microsoft Input Method Editor IME affected versions not specified Description: The issue is related to an out-of-bounds read in the Microsoft Input Method Editor IME, which allows an authorized attacker to elevate privileges locally...