Library Injection Vulnerability in Microsoft Teams for macOS
CVE-2024-41145

7.1HIGH

Key Information:

Vendor

Microsoft
Vendor
CVE Published:
18 December 2024

What is CVE-2024-41145?

CVE-2024-41145 is a significant library injection vulnerability found in the WebView.app helper for Microsoft Teams (work or school) version 24046.2813.2770.1094 specifically for macOS. This vulnerability allows an attacker to leverage Microsoft's access privileges through a specially crafted library, resulting in a permission bypass. A malicious application can exploit this flaw by injecting the crafted library into the Teams process, enabling unauthorized actions that exploit the elevated permissions of the vulnerable application. This poses a severe risk to users, as it can lead to unauthorized access and manipulation of user data and settings.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://talosintelligence.com/vulnerability_reports/TALOS...
https://www.talosintelligence.com/vulnerability_reports/T...

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.