Microsoft's Mac Apps Vulnerable to Exploits, Company Declines Full Fix
Security flaws in Microsoft apps for macOS allow hackers to bypass permissions, accessing cameras and microphones without user consent.
- Cisco Talos identified eight vulnerabilities in Microsoft apps like Outlook, Word, and Teams for macOS.
- These flaws enable hackers to inject malicious libraries and exploit app permissions without additional user verification.
- Microsoft has only patched Teams and OneNote, leaving other apps like Excel and PowerPoint still vulnerable.
- The company considers the vulnerabilities low risk, citing the need for unsigned libraries to support plugins.
- Researchers suggest Apple could improve macOS security by prompting users when third-party plugins are loaded.