CVE-2024-41159

Publication date

2024-12-18 22:39:10

Family

talos

State

PUBLISHED

Description

A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNotes access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable applications permissions.