Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-43106

No fix known EPSS <1%CVSS 7.1

A library injection vulnerability exists in Microsoft Excel 16.83 for macOS. A specially crafted library can leverage Excel's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.

Published 2024-12-18 · CVE record · OSV

Products: Microsoft Excel