Description
A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Teams (work or school) | 24046.2812.2722.8193 for macOS | — |
Advisories 1
- WID-SEC-2024-1882 Microsoft Office und Teams: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · Aug 19, 2024