How multiple vulnerabilities in Microsoft apps for macOS pave the way to stealing permissions
Tags
cmtmf-attack-pattern: Code Injection
attack-pattern: Data Direct Model Add-Ins - T1137.006 Code Injection - T1540 Dylib Hijacking - T1574.004 Keychain - T1634.001 Keychain - T1555.001 Keychain - T1579 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Vulnerabilities - T1588.006 Connection Proxy - T1090 Dylib Hijacking - T1157 Keychain - T1142
Show in Graph
Common Information
Type Value
UUID e6d21af7-fc0f-42e5-b30d-516434793bef
Fingerprint f5708c82e77738a5
Analysis status DONE
Considered CTI value 2
Text language
Published Aug. 19, 2024, 6 a.m.
Added to db Aug. 30, 2024, 11:56 p.m.
Last updated Nov. 17, 2024, 6:30 p.m.
Headline Cisco Talos Blog
Title How multiple vulnerabilities in Microsoft apps for macOS pave the way to stealing permissions
Detected Hints/Tags/Attributes 66/2/48
Source URLs
Redirection Url
Details Source https://blog.talosintelligence.com/how-multiple-vulnerabilities-in-microsoft-apps-for-macos-pave-the-way-to-stealing-permissions/
URL Provider
Details Provider Source level domain
Details talosintelligence.com blog.talosintelligence.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 68 ✔ Cisco Talos Blog https://blog.talosintelligence.com/rss/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 2 
cve-2024-42220
Details CVE 2 
cve-2024-42004
Details CVE 2 
cve-2024-39804
Details CVE 2 
cve-2024-41159
Details CVE 2 
cve-2024-43106
Details CVE 2 
cve-2024-41165
Details CVE 2 
cve-2024-41145
Details CVE 2 
cve-2024-41138
Details Domain 2 
webview.app
Details Domain 2 
com.microsoft.teams2.modulehost.app
Details Domain 3 
com.apple.security.device.camera
Details Domain 27 
com.microsoft
Details Domain 359 
com.apple
Details Domain 2 
ubf8t346g9.com.microsoft
Details Domain 6 
com.apple.developer.team
Details Domain 3 
com.apple.security.app
Details Domain 33 
com.apple.security
Details Domain 5 
com.apple.security.network
Details Domain 3 
com.apple.security.device.audio
Details Domain 2 
outlook.app
Details Domain 2 
ubf8t346g9.office
Details Domain 1 
ubf8t346g9.ms
Details Domain 1 
com.apple.security.assets.movies.read
Details Domain 1 
com.apple.security.assets.music.read
Details Domain 1 
com.apple.security.assets.pictures.read
Details Domain 2 
com.apple.security.automation.apple
Details Domain 4 
com.apple.security.files.user-selected.read
Details Domain 2 
com.apple.security.temporary-exception.apple
Details Domain 10 
com.cisco
Details Domain 3 
com.apple.security.temporary-exception.files.absolute-path.read
Details Domain 10 
com.microsoft.office
Details Domain 1 
com.apple.security.temporary-exception.files.home-relative-path.read
Details Domain 3 
com.apple.security.temporary-exception.mach-lookup.global
Details Domain 1 
com.apple.security.temporary-exception.shared-preference.read
Details Domain 1 
com.cisco.cisco
Details Domain 3 
com.apple.security.files.bookmarks.app
Details Domain 1 
com.apple.security.files.downloads.read
Details Domain 3 
autoupdate.app
Details Domain 2 
modulehost.app
Details File 130 
info.pl
Details File 15 
security.cs
Details File 1 
assets.mov
Details File 1 
assets.pict
Details File 1 
entourage.dat
Details File 1 
outlook.dat
Details File 1 
licensingv2.pl
Details File 1 
mdmclient.dae
Details File 28 
apple.sys