| CVE-2024-42004 | 严重9.8 | A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then mak | 18/12/2024 |
| CVE-2024-41165 | 严重9.1 | A library injection vulnerability exists in Microsoft Word 16.83 for macOS. A specially crafted library can leverage Word's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable applicatio | 18/12/2024 |
| CVE-2024-41159 | 高危7.1 | A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable appl | 18/12/2024 |
| CVE-2024-41145 | 严重9.8 | A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger t | 18/12/2024 |
| CVE-2024-41138 | 严重9.8 | A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start | 18/12/2024 |
| CVE-2024-39804 | 严重9.1 | A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS. A specially crafted library can leverage PowerPoint's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerabl | 18/12/2024 |
| CVE-2024-49142 | 高危7.8 | Microsoft Access Remote Code Execution Vulnerability | 12/12/2024 |
| CVE-2024-49105 | 高危8.4 | Remote Desktop Client Remote Code Execution Vulnerability | 12/12/2024 |
| CVE-2024-49070 | 高危7.4 | Microsoft SharePoint Remote Code Execution Vulnerability | 12/12/2024 |
| CVE-2024-49069 | 高危7.8 | Microsoft Excel Remote Code Execution Vulnerability | 12/12/2024 |
| CVE-2024-49068 | 高危8.2 | Microsoft SharePoint Elevation of Privilege Vulnerability | 12/12/2024 |
| CVE-2024-49065 | 中危5.5 | Microsoft Office Remote Code Execution Vulnerability | 12/12/2024 |
| CVE-2024-49064 | 中危6.5 | Microsoft SharePoint Information Disclosure Vulnerability | 12/12/2024 |
| CVE-2024-49063 | 高危8.4 | Microsoft/Muzic Remote Code Execution Vulnerability | 12/12/2024 |
| CVE-2024-49062 | 中危6.5 | Microsoft SharePoint Information Disclosure Vulnerability | 12/12/2024 |
| CVE-2024-49059 | 高危7.0 | Microsoft Office Elevation of Privilege Vulnerability | 12/12/2024 |
| CVE-2024-49057 | 高危8.1 | Microsoft Defender for Endpoint on Android Spoofing Vulnerability | 12/12/2024 |
| CVE-2024-43600 | 高危7.8 | Microsoft Office Elevation of Privilege Vulnerability | 12/12/2024 |
| CVE-2024-43594 | 高危7.3 | Microsoft System Center Elevation of Privilege Vulnerability | 12/12/2024 |
| CVE-2024-54138 | 中危6.1 | NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability related to its handling of autolinks in Markdown content. While the platform properly filters out JavaScript from standard links, it does not adequately sanitize autolinks. This oversight allows attackers to explo | 06/12/2024 |