User Account Control
The Text Services Framework was compromised by a privilege escalation vulnerability () that could allow attackers to use the framework to perform privileged operations, run software, or send messages to privileged processes from unprivileged processes—bypassing security features such as sandboxes or User Account Control. Microsoft remediated issues related to this vulnerability with the release of a patch in August 2019 for Windows Vista SP2, Windows Server 2008 SP2, and later versions of Windows.