← CVE Intelligence

CVE-2024-41159

Microsoft / OneNote PUBLISHED

Description (CNA)

A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.

Affected (CNA)

Vendor / productVersions
Microsoft / OneNoteaffected 16.83 for macOS

CWE

CWE-347

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.