← back
CVE-2024-42004

CVE-2024-42004

CVSS 7.1 HIGHEPSS 0.8%CWE-347
A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Affected products
Microsoft · Teams (work or school)

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://talosintelligence.com/vulnerability_reports/TALOS-2024-1973https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1973