A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.
Metrics
Affected Vendors & Products
References
History
Thu, 19 Dec 2024 17:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Wed, 18 Dec 2024 23:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
References |
|
Wed, 18 Dec 2024 23:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions. | |
Weaknesses | CWE-347 | |
References |
| |
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: talos
Published: 2024-12-18T22:40:14.307Z
Updated: 2024-12-19T16:45:56.860Z
Reserved: 2024-08-05T20:37:19.355Z
Link: CVE-2024-42004
Vulnrichment
Updated: 2024-12-19T16:45:52.360Z
NVD
Status : Received
Published: 2024-12-18T23:15:08.450
Modified: 2024-12-19T17:15:09.120
Link: CVE-2024-42004
Redhat
No data.