Home

Description

A library injection vulnerability exists in Microsoft Excel 16.83 for macOS. A specially crafted library can leverage Excel's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.

PUBLISHED Reserved 2024-08-05 | Published 2024-12-18 | Updated 2024-12-19 | Assigner talos




HIGH: 7.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Problem types

CWE-347: Improper Verification of Cryptographic Signature

Product status

16.83 for macOS
affected

Credits

Discovered by Francesco Benvenuto of Cisco Talos.

References

www.talosintelligence.com/...ability_reports/TALOS-2024-1976

talosintelligence.com/vulnerability_reports/TALOS-2024-1976 exploit

talosintelligence.com/vulnerability_reports/TALOS-2024-1976

cve.org (CVE-2024-43106)

nvd.nist.gov (CVE-2024-43106)

Download JSON