New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2024-39804

ExploitedNVDCIRCLENISA

EUVD-2024-37887 · Published Dec 18, 2024

A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS. A specially crafted library can leverage PowerPoint's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.

Technologies

Microsoft Powerpoint

Weaknesses

CWE-347

CVSS scores

  • v3.19.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Initial Access

References

Potentially impacted assets

See if this affects your attack surface

News

Our latest news

Couldn’t load the latest news.

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot