CVE-2024-43106
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Dec 18, 2024
Updated: Dec 19, 2024
CWE ID 347
Summary
CVE-2024-43106 is a library injection vulnerability affecting Microsoft Excel 16.83 for macOS. This issue allows a specially crafted library to bypass Excel's access privileges, enabling a malicious application to inject and start the program. Upon successful exploitation, the attacker can make use of the vulnerable application's permissions, potentially leading to unauthorized access or data theft. Users are advised to update their Excel software as soon as a patch becomes available to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.