VULNERABILITY INTELLIGENCE

CVE-2024-42220

CVSS score9.1 CRITICAL
EPSS probability0.74%
CISA KEVNot currently listed
Published2024-12-18
Last modified2026-06-17

Description

A library injection vulnerability exists in Microsoft Outlook 16.83.3 for macOS. A specially crafted library can leverage Outlook's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.