AZL-43387 CVE-2024-6655 affecting package gtk3 for versions less than 3.24.28-10

A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory...

AZL-43384 CVE-2024-6655 affecting package gtk2 for versions less than 2.24.32-12

A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory...

AZL-43377 CVE-2024-6655 affecting package gtk3 for versions less than 3.24.28-10

A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory...

CVE-2024-6655 Gtk3: gtk2: library injection from cwd

A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory...

SUSE CVE-2024-6655

A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory...

UBUNTU-CVE-2024-6655

A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory...

CVE-2024-6655

A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory...

PT-2024-5734 · Gtk +9 · Gtk +9

Name of the Vulnerable Software and Affected Versions: GTK versions prior to the fixed version Description: A flaw was found in the GTK library, allowing for library injection from the current working directory under certain conditions. This could potentially enable an attacker to elevate their...

Nextcloud Security Breach

Nextcloud is an open source, self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany.Nextcloud Desktop Client is a desktop client application for Nextcloud. A security vulnerability exists in Nextcloud Desktop Client versions prior to 3.12.0, which...

PT-2024-6144 · Microsoft · Teams

Name of the Vulnerable Software and Affected Versions: Microsoft Teams versions 24046.2813.2770.1094 Description: A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams for macOS. A specially crafted library can leverage Teams's access...

PT-2024-6145 · Microsoft · Teams

Name of the Vulnerable Software and Affected Versions: Microsoft Teams work or school version 24046.2813.2770.1094 for macOS Description: A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams for macOS. This issue allows a specially crafted library to leverage...

PT-2024-6143 · Microsoft · Office Powerpoint

Name of the Vulnerable Software and Affected Versions: Microsoft PowerPoint version 16.83 Description: A library injection issue exists, allowing a specially crafted library to leverage PowerPoint's access privileges and bypass permissions. This can be triggered by a malicious application injecti...

PT-2024-25910 · Trend Micro · Trend Micro Antivirus

Name of the Vulnerable Software and Affected Versions: Trend Micro Antivirus One affected versions not specified Description: The issue allowed for the injection of a custom dynamic library into the Antivirus One application. By exploiting this flaw, an attacker could execute malicious code withi...

PT-2024-6170 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Excel version 16.83 for macOS Description: A library injection vulnerability exists in Microsoft Excel. A specially crafted library can leverage Excel's access privileges, leading to a permission bypass. A malicious application coul...

PT-2024-6169 · Microsoft · Outlook

Name of the Vulnerable Software and Affected Versions: Microsoft Outlook version 16.83.3 Description: A library injection vulnerability exists in Microsoft Outlook. A specially crafted library can leverage Outlook's access privileges, leading to a permission bypass. A malicious application could...

PT-2024-6165 · Microsoft · Office Onenote

Name of the Vulnerable Software and Affected Versions: Microsoft OneNote version 16.83 Description: A library injection vulnerability exists in Microsoft OneNote for macOS. This issue is related to incorrect cryptographic signature verification, allowing a specially crafted library to leverage...

PT-2024-6166 · Microsoft · Office Word

Name of the Vulnerable Software and Affected Versions: Microsoft Word version 16.83 for macOS Description: A library injection vulnerability exists in Microsoft Word. A specially crafted library can leverage Word's access privileges, potentially leading to a permission bypass. A malicious...

OpenVPN Connect Security Breach

OpenVPN Connect is a VPN Virtual Private Network client application from US-based OpenVPN. A security vulnerability exists in OpenVPN Connect versions 3.0 through 3.4.6, which stems from a vulnerability that allows local users to execute code in external third-party libraries using the...

PT-2023-23233 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions 2.2.0p10 through 2.2.0p16 Description: The issue concerns the usage of user-controlled LD LIBRARY PATH in the agent of Checkmk, allowing a malicious Checkmk site user to escalate rights via the injection of malicious librarie...

PT-2023-31163 · Unknown · Xmachoviewer

Name of the Vulnerable Software and Affected Versions: XMachOViewer version 0.04 Description: A dylib injection issue allows attackers to compromise integrity by injecting unauthorized code into the product's processes. This could potentially lead to remote control and unauthorized access to...