Library Injection Flaw in Microsoft Word for macOS

CVE-2024-41165

Summary

CVE-2024-41165 describes a critical library injection vulnerability present in Microsoft Word version 16.83 specifically designed for macOS. This flaw allows an attacker to exploit the application’s access privileges through a specially crafted library, enabling a permission bypass. By injecting a malicious library into Microsoft Word and executing it, an attacker can gain unauthorized access to the application's permissions, potentially leading to further malicious activities. Users of affected versions are advised to update their software immediately to mitigate the risks posed by this vulnerability.

References