Multiple flaws in Microsoft macOS apps unpatched despite potential risks

Cisco Talos disclosed eight vulnerabilities across Microsoft macOS applications (Excel, OneNote, Outlook, PowerPoint, Teams, Word) that stem from disabled library validation and entitlements allowing potential library injection; if exploited, an attacker could inherit app entitlements to access protected resources (camera, microphone, files, keylogging) and escalate privileges. Talos did not publish a working exploit; Microsoft considers the issues low risk, has removed the risky entitlement from Teams and OneNote but left other Office apps unchanged.