Library Injection Vulnerability in Microsoft PowerPoint for macOS

CVE-2024-39804

Summary

A serious library injection vulnerability has been identified in Microsoft PowerPoint version 16.83 for macOS. This vulnerability enables attackers to manipulate PowerPoint's access privileges by injecting a specially crafted library. By exploiting this flaw, a malicious application could execute code with the privileges of the vulnerable instance of PowerPoint, potentially leading to unauthorized access and data leakage. Users of PowerPoint for macOS are strongly advised to update their software to mitigate the risks associated with this vulnerability. For further details, refer to Talos Intelligence Report for comprehensive analysis and remediation steps.

References