MICROSOFT-CVE-2025-47972

HIGH8.0

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

Published Aug 14, 2025

Modified 2 weeks ago

Details

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges over a network.

References

ADVISORY

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47972

CVSS Analysis

CVSS v2.0

8.0

Upstream

CVE-2025-47972

Ecosystems

Timeline

PublishedAug 14, 2025

ModifiedJun 1, 2026