CVE-2023-21332

CVE-2023-21332 concerns Android’s Text Services, where a side-channel could reveal whether an app is installed without query permissions. This enables local information disclosure with no extra execution privileges and no user interaction required. The issue is categorized as affecting the Text S...

CVE-2023-21332

In Text Services, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitatio...

PT-2023-18108 · Unknown · Text Services

Name of the Vulnerable Software and Affected Versions: Text Services affected versions not specified Description: In Text Services, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local...

PT-2023-18109 · Unknown · Text Services

Name of the Vulnerable Software and Affected Versions: In Text Services affected versions not specified Description: The issue allows determining whether an app is installed without query permissions due to side channel information disclosure. This could lead to local information disclosure with ...

The vulnerability of the Text Services Framework software interface in Windows operating systems, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability of the Text Services Framework software interface in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2020-4653 · Microsoft · Windows Msctf Server +1

Name of the Vulnerable Software and Affected Versions: Windows MSCTF Server affected versions not specified Description: The issue exists due to insufficient input validation in the Windows MSCTF Server component of the Windows operating system. Exploitation of this issue may allow an attacker to...

The vulnerability of the Text Services Framework (TSF) component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Text Services Framework TSF component in Windows operating systems is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

CVE-2020-16921

An information disclosure vulnerability exists in Text Services Framework when it fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could potentially read data that was not intended to be disclosed. Note that this vulnerability would not allow a...

CVE-2020-16921

An information disclosure vulnerability exists in Text Services Framework when it fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could potentially read data that was not intended to be disclosed. Note that this vulnerability would not allow a...

Information disclosure

An information disclosure vulnerability exists in Text Services Framework when it fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could potentially read data that was not intended to be disclosed. Note that this vulnerability would not allow a...

CVE-2020-16921

CVE-2020-16921 is an information-disclosure vulnerability in the Windows Text Services Framework caused by improper handling of objects in memory. An attacker who can log on to an affected system and open a specially crafted file could read data not intended to be disclosed. The issue does not en...

CVE-2020-16921 Windows Text Services Framework Information Disclosure Vulnerability

...

CVE-2020-16921 Windows Text Services Framework Information Disclosure Vulnerability

...

Windows Text Services Framework Information Disclosure Vulnerability

An information disclosure vulnerability exists in Text Services Framework when it fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could potentially read data that was not intended to be disclosed. Note that this vulnerability would not allow a...

The vulnerability of the Windows Text Service Module in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Text Service Module in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Windows/Windows Server Remote Code Execution Vulnerability (CNVD-2021-65596)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Microsoft Windows/Windows Server. The vulnerability stems...

The vulnerability of the Windows Text Service Framework component in operating systems Windows, which allows a hacker to increase their privileges

The vulnerability of the Windows Text Service Framework component in operating systems exists due to insufficient checks on the input data at the TSF server. Exploiting this vulnerability can allow attackers to enhance their privileges...

Google Finds 20-Year-Old Microsoft Windows Vulnerability

There's no indication that this vulnerability was ever used in the wild, but the code it was discovered in -- Microsoft's Text Services Framework -- has been around since Windows XP...

Microsoft Windows Text Services Framework MSCTF - Multiple Vulnerabilities

Microsoft Windows Text Services Framework MSCTF - Multiple Vulnerabilities The msctf subsystem is part of the Text Services Framework, The TSF manages things like input methods, keyboard layouts, text processing and so on. There are two main components, the ctfmon server and the msctf client. The...

Microsoft Windows Text Services Framework MSCTF - Multiple Vulnerabilities

The msctf subsystem is part of the Text Services Framework, The TSF manages things like input methods, keyboard layouts, text processing and so on. There are two main components, the ctfmon server and the msctf client. The ctfmon service creates an ALPC port in a well known location, to which...