CVE-2014-4077VulnerabilityPublished 05/25/2022Updated 10/24/2026
CVE-2014-4077: Microsoft IME Japanese Privilege Escalation Vulnerability
Affects Microsoft Input Method Editor (IME) JapaneseSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 05/25/2022
- KEV deadline
- 06/15/2022
- EPSS
- 54.6% chance of exploitation in 30 days – higher than 99% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
CVE-2014-4077 is a privilege escalation vulnerability in Microsoft Input Method Editor (IME) Japanese, specifically involving the IMJPDCT.EXE component. This vulnerability allows attackers to bypass sandbox restrictions and escalate privileges on affected Windows systems. The IME Japanese keyboard is included by default in Windows but is disabled by default. Exploitation of this vulnerability has been observed in the wild.