7.1
High
CVE-2024-41159 A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS
Description
A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OneNote | Versions not published |
References
- talosintelligence.com talosintelligence.com
Timeline
- Published
- Last modified