CVE-2014-4077: Microsoft IME Japanese Privilege Escalation Vulnerability

Required action (CISA's text)

Apply updates per vendor instructions.

Description (NVD)

Microsoft Input Method Editor (IME) Japanese is a keyboard with Japanese characters that can be enabled on Windows systems as it is included by default (with the default set as disabled). IME Japanese contains an unspecified vulnerability when IMJPDCT.EXE (IME for Japanese) is installed which allows attackers to bypass a sandbox and perform privilege escalation.

SOURCES

• CISA KEVCISA Known Exploited Vulnerabilities catalog

Other Microsoft flaws

• patchtuesday:2026-11: Vulnerability in Microsoft
• CVE-2026-124194: Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability
• CVE-2026-96951: Microsoft Windows Command Injection Vulnerability
• CVE-2026-65660: Microsoft SharePoint Code Injection Vulnerability
• CVE-2026-85880: Microsoft Windows Heap-Based Buffer Overflow Vulnerability

Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.