Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4ch4-jp34-qwgw

Опубликовано: 19 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.

A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.

EPSS

Процентиль: 16%
0.0005
Низкий

7.1 High

CVSS3

Дефекты

CWE-347

Связанные уязвимости

CVSS3: 7.1
nvd
около 1 года назад

A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.

CVSS3: 7.1
fstec
больше 1 года назад

Уязвимость корпоративной платформы Microsoft Teams операционной системы Mac OS, позволяющая нарушителю обойти существующие ограничения безопасности

EPSS

Процентиль: 16%
0.0005
Низкий

7.1 High

CVSS3

Дефекты

CWE-347