Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vwj8-ggfw-43w9

Опубликовано: 19 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.

A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.

EPSS

Процентиль: 4%
0.0002
Низкий

7.1 High

CVSS3

Дефекты

CWE-347

Связанные уязвимости

CVSS3: 7.1
nvd
около 1 года назад

A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.

CVSS3: 7.1
fstec
почти 2 года назад

Уязвимость программного средства для создания заметок Microsoft OneNote операционной системы Mac OS, позволяющая нарушителю обойти существующие ограничения безопасности

EPSS

Процентиль: 4%
0.0002
Низкий

7.1 High

CVSS3

Дефекты

CWE-347