Skip to content
OpenAdvisories
High · 7.1 CVE-2024-41138 EUVD-2024-38896GHSA-fp2v-f9gm-2jc9

A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.28…

Published Dec 18, 2024 · Updated Dec 20, 2024 · Assigned by talos

Description

A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.

Affected products

VendorProductAffectedFixed
Microsoft Teams (work or school) 24046.2812.2722.8193 for macOS —

Advisories 1

References