CVE-2026-51990

An issue in Sogou Sogou Input Method < 16.3.0.3498 (fixed in 16.3.0.3498) allows a remote attacker to execute arbitrary code via the biz_helper.exe component

  • Published Sep 16, 2026
  • CVSS 9.8 critical
  • 0.9% chance of exploitation in the next 30 days (EPSS)
  • A fix is available

CVE-2026-51990 at the National Vulnerability Database