Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qfv9-wmf6-2j52

Опубликовано: 19 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

A library injection vulnerability exists in Microsoft Excel 16.83 for macOS. A specially crafted library can leverage Excel's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.

A library injection vulnerability exists in Microsoft Excel 16.83 for macOS. A specially crafted library can leverage Excel's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.

EPSS

Процентиль: 23%
0.00077
Низкий

7.1 High

CVSS3

Дефекты

CWE-347

Связанные уязвимости

CVSS3: 7.1
nvd
около 1 года назад

A library injection vulnerability exists in Microsoft Excel 16.83 for macOS. A specially crafted library can leverage Excel's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.

CVSS3: 7.1
fstec
почти 2 года назад

Уязвимость редактора электронных таблиц Microsoft Excel операционной системы Mac OS, связанная с ошибками проверки криптографической подписи, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 23%
0.00077
Низкий

7.1 High

CVSS3

Дефекты

CWE-347