Description
The Microsoft Office Input Method Editor (IME) for Simplified Chinese in Microsoft Pinyin IME 2010, Office Pinyin SimpleFast Style 2010, and Office Pinyin New Experience Style 2010 does not properly restrict access to configuration options, which allows local users to gain privileges via the Microsoft Pinyin (aka MSPY) IME toolbar, aka "Pinyin IME Elevation Vulnerability."
References (2)
Core 2
Core References
US Government Resource third-party-advisory
x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA11-347A.html
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-088
Scores
EPSS
0.0170
EPSS Percentile
75.0%
Details
CWE
CWE-264
Status
published
Products (3)
microsoft/pinyin_ime
2010 (2 CPE variants)
microsoft/pinyin_new_experience_style
2010 (2 CPE variants)
microsoft/pinyin_simple_fast_style
2010 (2 CPE variants)
Published
Dec 14, 2011
Tracked Since
Feb 18, 2026