CVE-2011-2010

CVE-2011-2010 describes an elevation of privilege vulnerability in the Microsoft Office Input Method Editor (IME) for Simplified Chinese, specifically affecting Microsoft Pinyin IME 2010, Office Pinyin SimpleFast Style 2010, and Office Pinyin New Experience Style 2010. This flaw allows local users to gain elevated privileges by manipulating configuration options via the Microsoft Pinyin IME toolbar. The vulnerability carries a CVSS score of 7.2, indicating high severity with a local attack vector and low attack complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. Its EPSS score is low, suggesting a low probability of exploitation. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion is minimal, with only one mention found, and there is no media coverage.