CVE-2024-42004

CVE-2024-42004 describes a critical library injection vulnerability affecting Microsoft Teams (work or school) on macOS. This flaw allows a specially crafted library to bypass permissions by leveraging Teams's access privileges, enabling a malicious application to inject code and operate with the vulnerable application's permissions. With a CVSS score of 9.8 (CRITICAL), the vulnerability is remotely exploitable with low attack complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating high awareness despite its inactive status on the CISA KEV catalog.