4 matches found
JVN#21627267: Microsoft IME may insecurely load Dynamic Link Libraries
Microsoft IME, bundled with Microsoft Windows, contains an issue in loading DLLs. When some application programs are invoked, they may initiate Microsoft IME. This IME, when initiated, checks a certain registry key for a file path to a DLL file and loads it. This registry key does not exist by...
Microsoft Windows IME Elevation of Privilege (MS16-130: CVE-2016-7221)
An elevation of privilege vulnerability exists in Windows Input Method Editor IME. The vulnerability is due to the way Input Method Editor improperly handles DLL loading. A locally authenticated attacker can exploit this vulnerability by running a specially crafted application...
Microsoft Task Scheduler Elevation of Privilege (MS16-130: CVE-2016-7222)
An elevation of privilege vulnerability exists in the Windows Task Scheduler. A locally authenticated attacker can exploit this vulnerability by using Windows Task Scheduler to schedule a new task with a malicious UNC path...
