Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
CWE-1390