← Back

Teams

teams

Vendor: Microsoft • 23 CVEs

CVEs (23)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-42835
1Microsoft
1Teams
Jun 17, 2026
Jun 9, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.
CVE-2026-32185
1Microsoft
1Teams
Jun 17, 2026
May 12, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Files or directories accessible to external parties in Microsoft Teams allows an unauthorized attacker to perform spoofing locally.
CVE-2026-33823
1Microsoft
1Teams
Jun 17, 2026
May 7, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over a network.
CVE-2026-26133
1Microsoft
10365 Copilot
EdgeExcel+7 more
Jun 17, 2026
Mar 16, 2026
N/A· v4
7.1 HIGH· v3
N/A· v2
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
CVE-2026-21535
1Microsoft
1Teams
Jun 17, 2026
Feb 19, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Improper access control in Microsoft Teams allows an unauthorized attacker to disclose information over a network.
CVE-2025-53783
1Microsoft
5Dynamics 365 Guides
Dynamics 365 Remote AssistTeams+2 more
Jun 17, 2026
Aug 12, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network.
CVE-2025-49737
1Microsoft
1Teams
Jun 17, 2026
Jul 8, 2025
N/A· v4
7.0 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Teams allows an authorized attacker to elevate privileges locally.
CVE-2025-49731
1Microsoft
1Teams
Jun 17, 2026
Jul 8, 2025
N/A· v4
3.1 LOW· v3
N/A· v2
Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network.
CVE-2024-42004
1Microsoft
1Teams
Jun 17, 2026
Dec 18, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious...Show more
A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.Show less
CVE-2024-41145
1Microsoft
1Teams
Jun 17, 2026
Dec 18, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a...Show more
A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.Show less
CVE-2024-41138
1Microsoft
1Teams
Jun 17, 2026
Dec 18, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access p...Show more
A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.Show less
CVE-2024-38197
1Microsoft
1Teams
Jun 17, 2026
Aug 13, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Microsoft Teams for iOS Spoofing Vulnerability
CVE-2024-21448
1Microsoft
1Teams
Jun 17, 2026
Mar 12, 2024
N/A· v4
5.0 MEDIUM· v3
N/A· v2
Microsoft Teams for Android Information Disclosure Vulnerability
CVE-2024-21374
1Microsoft
1Teams
Jun 17, 2026
Feb 13, 2024
N/A· v4
5.0 MEDIUM· v3
N/A· v2
Microsoft Teams for Android Information Disclosure Vulnerability
CVE-2023-4863
9Bandisoft
BentleyDebian+6 more
12Active Iq Unified Manager
ChromeDebian Linux+9 more
Jun 17, 2026
Sep 12, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical...Show more
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)Show less
CVE-2023-29330
1Microsoft
1Teams
Jun 17, 2026
Aug 8, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Microsoft Teams Remote Code Execution Vulnerability
CVE-2023-29328
1Microsoft
1Teams
Jun 17, 2026
Aug 8, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Microsoft Teams Remote Code Execution Vulnerability
CVE-2023-24881
1Microsoft
1Teams
Jun 17, 2026
Jul 11, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Microsoft Teams Information Disclosure Vulnerability
CVE-2022-21965
1Microsoft
1Teams
Jun 17, 2026
Feb 9, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Microsoft Teams Denial of Service Vulnerability
CVE-2021-24114
1Microsoft
1Teams
Jun 17, 2026
Feb 25, 2021
N/A· v4
5.7 MEDIUM· v3
3.5 LOW· v2
Microsoft Teams iOS Information Disclosure Vulnerability