Library Injection Vulnerability in Microsoft OneNote for macOS

CVE-2024-41159

Summary

A critical library injection vulnerability, identified as CVE-2024-41159, exists in Microsoft OneNote version 16.83 for macOS. This vulnerability allows an attacker to craft a malicious library that exploits OneNote's elevated access privileges, enabling a permission bypass. By injecting this library into a vulnerable application instance, the attacker can execute code with the application's permissions, potentially compromising the system's security. Users of affected versions are strongly advised to apply security updates and follow best practices to mitigate the risk.

References