Sogou Input Method
Approved changes feed: RSS · Atom
cpe:2.3:a:sogou:sogou_input_method:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Sogou (041f2c11-1d13-54e6-a24c-6467bb214026) |
|---|---|
| Product | Sogou Input Method (3f986361-27df-5394-a68e-c98868ef8a45) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-120422 |
vulnerable | 2026-11-04 14:25:23.867979 |
Insecure HTTP configuration retrieval in Sogou Input Method allows arbitrary code execution
Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The application retrieves configuration data over unencrypted HTTP connections, allowing an attacker capable of manipulating network traffic to replace legitimate server responses with malicious configurations. An attacker can exploit this vulnerability to instruct SGTool.exe to download attacker-controlled files to arbitrary locations, including paths used by legitimate application components. This can result in arbitrary code execution when the downloaded files are subsequently executed or loaded by the application.
Published: 2026-11-04T10:06:13.119Z
Updated: 2026-11-05T19:09:21.936Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.