Skip to content
OpenAdvisories
High · 7.1 CVE-2024-41165 EUVD-2024-38899GHSA-qc4c-822v-vp4m

A library injection vulnerability exists in Microsoft Word 16.83 for macOS. A specially crafted library can leverage Word's access privileg…

Published Dec 18, 2024 · Updated Dec 20, 2024 · Assigned by talos

Description

A library injection vulnerability exists in Microsoft Word 16.83 for macOS. A specially crafted library can leverage Word's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.

Affected products

VendorProductAffectedFixed
Microsoft Word 16.83 for macOS —

Advisories 1

References