Home

Description

A library injection vulnerability exists in Microsoft Outlook 16.83.3 for macOS. A specially crafted library can leverage Outlook's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.

PUBLISHED Reserved 2024-08-05 | Published 2024-12-18 | Updated 2024-12-19 | Assigner talos




HIGH: 7.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Problem types

CWE-347: Improper Verification of Cryptographic Signature

Product status

16.83.3 for macOS
affected

Credits

Discovered by Francesco Benvenuto of Cisco Talos.

References

www.talosintelligence.com/...ability_reports/TALOS-2024-1972

talosintelligence.com/vulnerability_reports/TALOS-2024-1972 exploit

talosintelligence.com/vulnerability_reports/TALOS-2024-1972

cve.org (CVE-2024-42220)

nvd.nist.gov (CVE-2024-42220)

Download JSON

Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.