CVE Vulnerabilities

CVE-2024-43106

Improper Verification of Cryptographic Signature

Published: Dec 18, 2024 | Modified: Aug 22, 2025
CVSS 3.x
9.1
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

A library injection vulnerability exists in Microsoft Excel 16.83 for macOS. A specially crafted library can leverage Excels access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable applications permissions.

Weakness

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

Affected Software

Name Vendor Start Version End Version
Excel Microsoft 16.83 (including) 16.83 (including)

References