We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.
Reserved 2024-08-05 | Published 2024-12-18 | Updated 2024-12-28 | Assigner talosCWE-347: Improper Verification of Cryptographic Signature
Discovered by Francesco Benvenuto of Cisco Talos.
talosintelligence.com/vulnerability_reports/TALOS-2024-1990
Support options
