DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Microsoft Office und Teams: Mehrere Schwachstellen ermöglichen Privilegieneskalation
Advisory ansehen veröffentlicht 2024-08-19
Ein lokaler Angreifer kann mehrere Schwachstellen in Microsoft Office und Teams auf MacOS ausnutzen, um seine Privilegien zu erhöhen.
01
beschreibt (8)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-43106US | critical9.1 | — | ||
A library injection vulnerability exists in Microsoft Excel 16.83 for macOS. A specially crafted library can leverage Excel's access privileges, leading to a permission bypass. A m… | ||||
| CVE-2024-42220US | critical9.1 | — | ||
A library injection vulnerability exists in Microsoft Outlook 16.83.3 for macOS. A specially crafted library can leverage Outlook's access privileges, leading to a permission bypas… | ||||
| CVE-2024-42004US | critical9.8 | — | ||
A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, lea… | ||||
| CVE-2024-41165US | critical9.1 | — | ||
A library injection vulnerability exists in Microsoft Word 16.83 for macOS. A specially crafted library can leverage Word's access privileges, leading to a permission bypass. A mal… | ||||
| CVE-2024-41159US | high7.1 | — | ||
A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass.… | ||||
| CVE-2024-41145US | critical9.8 | — | ||
A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage… | ||||
| CVE-2024-41138US | critical9.8 | — | ||
A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially craft… | ||||
| CVE-2024-39804US | critical9.1 | — | ||
A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS. A specially crafted library can leverage PowerPoint's access privileges, leading to a permission b… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Talos Blog vom 2024-08-19external
- Talos Vulnerability Report TALOS-2024-1972 vom 2024-08-19external
- Talos Vulnerability Report TALOS-2024-1973 vom 2024-08-19external
- Talos Vulnerability Report TALOS-2024-1974 vom 2024-08-19external
- Talos Vulnerability Report TALOS-2024-1975 vom 2024-08-19external
- Talos Vulnerability Report TALOS-2024-1976 vom 2024-08-19external
- Talos Vulnerability Report TALOS-2024-1977 vom 2024-08-19external
- Talos Vulnerability Report TALOS-2024-1990 vom 2024-08-19external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan