New Flaws in Microsoft macOS Apps Could Allow Hackers to Gain Unrestricted Access
An adversary could use eight vulnerabilities found in Microsoft applications for macOS to circumvent the permissions-based model of the operating system, which is based on the Transparency, Consent, and Control (TCC) framework, and obtain elevated privileges or access sensitive data.
According to Cisco Talos, in the event of success, the adversary might obtain all privileges already provided to the impacted Microsoft programs. For instance, the attacker might capture images, record movies, record audio clips, and send emails from the user account without the user realizing.
The issues affect a number of different programs, including OneNote, Teams, Word, Excel, PowerPoint, and Outlook.
According to the cybersecurity organization, if malicious libraries are introduced into these a...