EIP-2026-117582

This is a detailed technical analysis of multiple critical design flaws in the Windows Text Services Framework (TSF) msctf subsystem, including ALPC port accessibility across sessions, UIPI bypass, and arbitrary code execution via unvalidated command indices. The author provides an interactive tool (ctftool.exe) to probe and exploit these vulnerabilities.