DeutschShown in its original language — a full translation is planned for a future version.
Microsoft Office und Teams: Mehrere Schwachstellen ermöglichen Privilegieneskalation
view advisory published 2024-08-19
Ein lokaler Angreifer kann mehrere Schwachstellen in Microsoft Office und Teams auf MacOS ausnutzen, um seine Privilegien zu erhöhen.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-43106US | critical9.1 | — | ||
A library injection vulnerability exists in Microsoft Excel 16.83 for macOS. A specially crafted library can leverage Excel's access privileges, leading to a permission bypass. A m… | ||||
| CVE-2024-42220US | critical9.1 | — | ||
A library injection vulnerability exists in Microsoft Outlook 16.83.3 for macOS. A specially crafted library can leverage Outlook's access privileges, leading to a permission bypas… | ||||
| CVE-2024-42004US | critical9.8 | — | ||
A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, lea… | ||||
| CVE-2024-41165US | critical9.1 | — | ||
A library injection vulnerability exists in Microsoft Word 16.83 for macOS. A specially crafted library can leverage Word's access privileges, leading to a permission bypass. A mal… | ||||
| CVE-2024-41159US | high7.1 | — | ||
A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass.… | ||||
| CVE-2024-41145US | critical9.8 | — | ||
A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage… | ||||
| CVE-2024-41138US | critical9.8 | — | ||
A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially craft… | ||||
| CVE-2024-39804US | critical9.1 | — | ||
A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS. A specially crafted library can leverage PowerPoint's access privileges, leading to a permission b… | ||||
02
references
External citations — patches, advisories, analysis.
- Talos Blog vom 2024-08-19external
- Talos Vulnerability Report TALOS-2024-1972 vom 2024-08-19external
- Talos Vulnerability Report TALOS-2024-1973 vom 2024-08-19external
- Talos Vulnerability Report TALOS-2024-1974 vom 2024-08-19external
- Talos Vulnerability Report TALOS-2024-1975 vom 2024-08-19external
- Talos Vulnerability Report TALOS-2024-1976 vom 2024-08-19external
- Talos Vulnerability Report TALOS-2024-1977 vom 2024-08-19external
- Talos Vulnerability Report TALOS-2024-1990 vom 2024-08-19external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan