CVE-2011-2010: microsoft pinyin_ime
Vulnerability summary
CVE-2011-2010 is a high (CVSS 7.2) vulnerability in microsoft pinyin_ime. EPSS estimates a 1.70% chance of exploitation in the next 30 days, higher than 76.8% of scored vulnerabilities.
Timeline
- 14-12-2011PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The Microsoft Office Input Method Editor (IME) for Simplified Chinese in Microsoft Pinyin IME 2010, Office Pinyin SimpleFast Style 2010, and Office Pinyin New Experience Style 2010 does not properly restrict access to configuration options, which allows local users to gain privileges via the Microsoft Pinyin (aka MSPY) IME toolbar, aka "Pinyin IME Elevation Vulnerability."
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.70%
Chance of exploitation in the next 30 days
Percentile
77%
Versus all other CVEs
30-day change
0.00 pp
From 1.70% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Microsoft3 products
1 vendor · 3 products
References
2 links- www.us-cert.gov/cas/techalerts/TA11-347A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-088Vendor AdvisoryX Refsource MS