Skip to content
OpenAdvisories
High · 7.1 CVE-2024-43106 EUVD-2024-40712GHSA-qfv9-wmf6-2j52

A library injection vulnerability exists in Microsoft Excel 16.83 for macOS. A specially crafted library can leverage Excel's access privil…

Published Dec 18, 2024 · Updated Dec 19, 2024 · Assigned by talos

Description

A library injection vulnerability exists in Microsoft Excel 16.83 for macOS. A specially crafted library can leverage Excel's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.

Affected products

VendorProductAffectedFixed
Microsoft Excel 16.83 for macOS —

Advisories 1

References