cve 2026 58534

The cve 2026 58534 tag covers Microsoft’s security fix for a Windows Input Method Editor (IME) vulnerability addressed in the July 14 updates. The flaw is a heap-based buffer overflow that can allow a locally authenticated, low-privileged attacker to elevate privileges. Microsoft rates the issue High and assigns it a CVSS 3.1 score of 8.8. Exploitation requires local access and has low attack complexity, while no user interaction is required. This tag page follows the vulnerability’s advisory, severity, affected Windows component, and the recommendation to install the July security updates to reduce exposure.