CVE-2024-39804
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Dec 18, 2024
CWE ID 347
Summary
CVE-2024-39804: A new vulnerability has been identified in Microsoft PowerPoint 16.83 for macOS. This issue involves a library injection vulnerability, enabling a specially crafted library to bypass PowerPoint's access privileges. Malicious applications could exploit this flaw by injecting a library and launching the program, gaining unauthorized access to the vulnerable application's permissions. Users are advised to update their software to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Office Powerpoint
Affected Vendors
- Microsoft