CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Improper Input Validation
Summary: an elevation of privilege vulnerability exists in windows text service framework (tsf) when the tsf server process does not validate the source of input or commands it receives, aka 'windows text service framework elevation of privilege vulnerability'.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-09-11
Last Modified Date: 2019-09-12