A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.
Metrics
Affected Vendors & Products
References
History
Wed, 18 Dec 2024 23:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
References |
|
Wed, 18 Dec 2024 23:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions. | |
Weaknesses | CWE-347 | |
References |
| |
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: talos
Published: 2024-12-18T22:38:38.457Z
Updated: 2024-12-18T23:02:57.946Z
Reserved: 2024-08-05T20:37:11.630Z
Link: CVE-2024-41145
Vulnrichment
No data.
NVD
Status : Received
Published: 2024-12-18T23:15:07.970
Modified: 2024-12-18T23:15:07.970
Link: CVE-2024-41145
Redhat
No data.