Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fp2v-f9gm-2jc9

Опубликовано: 19 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.

A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.

EPSS

Процентиль: 34%
0.0014
Низкий

7.1 High

CVSS3

Дефекты

CWE-347

Связанные уязвимости

CVSS3: 7.1
nvd
около 1 года назад

A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.

CVSS3: 7.1
fstec
больше 1 года назад

Уязвимость корпоративной платформы Microsoft Teams операционной системы, позволяющая нарушителю обойти существующие ограничения безопасности

EPSS

Процентиль: 34%
0.0014
Низкий

7.1 High

CVSS3

Дефекты

CWE-347