CVE-2024-41159

https://notcve.org/view.php?id=CVE-2024-41159

18 Dec 2024 — A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions. Existe una vulnerabilidad de inyección de librería en Microsoft OneNote 16.83 para macOS. Una librería especialmente manipulada puede aprovechar los privilegios de acces... • https://talosintelligence.com/vulnerability_reports/TALOS-2024-1975 • CWE-347: Improper Verification of Cryptographic Signature •