CVE Vulnerabilities

CVE-2024-41145

Improper Verification of Cryptographic Signature

Published: Dec 18, 2024 | Modified: Dec 18, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teamss access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable applications permissions.

Weakness

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

References