7.1
High
CVE-2024-41165 A library injection vulnerability exists in Microsoft Word 16.83 for macOS
Description
A library injection vulnerability exists in Microsoft Word 16.83 for macOS. A specially crafted library can leverage Word's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Word | Versions not published |
References
- talosintelligence.com talosintelligence.com
Timeline
- Published
- Last modified
Other CVEs of Word
The 7 CVEs of Word →
CVE-2019-0561
An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft…
Not rated
CVE-2019-0585
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in…
Not rated
CVE-2018-8378
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an…
Not rated
CVE-2018-8160
An information disclosure vulnerability exists in Outlook when a message is opened, aka "Microsoft Outlook Information…
Not rated