7.1
High
CVE-2024-43106 A library injection vulnerability exists in Microsoft Excel 16.83 for macOS
Description
A library injection vulnerability exists in Microsoft Excel 16.83 for macOS. A specially crafted library can leverage Excel's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Excel | Versions not published |
References
- talosintelligence.com talosintelligence.com
Timeline
- Published
- Last modified
Other CVEs of Excel
The 4 CVEs of Excel →
CVE-2018-8627
An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an…
Not rated
CVE-2018-8577
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle…
Not rated
CVE-2018-1028
A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted…
Not rated