Library Injection Vulnerability in Microsoft Teams for macOS

CVE-2024-41145

Summary

CVE-2024-41145 is a significant library injection vulnerability found in the WebView.app helper for Microsoft Teams (work or school) version 24046.2813.2770.1094 specifically for macOS. This vulnerability allows an attacker to leverage Microsoft's access privileges through a specially crafted library, resulting in a permission bypass. A malicious application can exploit this flaw by injecting the crafted library into the Teams process, enabling unauthorized actions that exploit the elevated permissions of the vulnerable application. This poses a severe risk to users, as it can lead to unauthorized access and manipulation of user data and settings.

References