input_method vulnerabilities

CVEs whose affected-version data names the input_method package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-120422High· 8.9

3d ago

Insecure HTTP configuration retrieval in Sogou Input Method allows arbitrary code execution

Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The application retrieves configuration data over unencrypted HTTP connections, allowing an attacker capable of…

▾ TwilightSogou · Sogou Input MethodEPSS 0.45%via CVEORG