CVE-2024-42004 - A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS

Back Back to CVE browser

CRITICAL

A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS

Published Dec 18, 2024

9.8

CRITICAL

CVSS 3.1

EPSS 0.81%

Description

A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.

Affected products

Vendor Microsoft Product Teams (work or school) Default
n/a
- Version
  24046.2812.2722.8193 for macOS
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Teams (work or school)

n/a

Version	Status	Constraints
24046.2812.2722.8193 for macOS	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-347

References (2)

https://talosintelligence.com/vulnerability_reports/TALOS-2024-1973
exploitThird Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1973
ExploitThird Party Advisory

Link	Providers	Tags
https://talosintelligence.com/vulnerability_reports/TALOS-2024-1973		exploitThird Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1973		ExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner talos

Published Dec 18, 2024

Updated Dec 19, 2024

Reserved Aug 5, 2024

Link CVE-2024-42004

CISA Vulnrichment

Updated Dec 19, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-42004

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-42004