CVE-2014-4077
CISA KEVPublished May 25, 2022 · Updated April 3, 2026
high
Official Description+
Microsoft Input Method Editor (IME) Japanese is a keyboard with Japanese characters that can be enabled on Windows systems as it is included by default (with the default set as disabled). IME Japanese contains an unspecified vulnerability when IMJPDCT.EXE (IME for Japanese) is installed which allows attackers to bypass a sandbox and perform privilege escalation.
Affected Products
| Vendor | Product |
|---|---|
| Microsoft | Input Method Editor (IME) Japanese |
Patch Status
Patch by 2022-06-15
Recommended Actions
- Check if your systems use any of the affected products listed above.
- Apply vendor patches immediately if available.
- This vulnerability is in CISA's Known Exploited Vulnerabilities catalog — prioritize remediation.
- Monitor vendor advisories for updates and additional mitigations.
- Review logs for indicators of compromise related to CVE-2014-4077.