Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Teams
Total 16 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-53783 1 Microsoft 5 Dynamics 365 Guides, Dynamics 365 Remote Assist, Teams and 2 more 2025-09-03 N/A 7.5 HIGH
Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network.
CVE-2024-41138 1 Microsoft 1 Teams 2025-08-26 N/A 7.1 HIGH
A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.
CVE-2024-42004 1 Microsoft 1 Teams 2025-08-26 N/A 7.1 HIGH
A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.
CVE-2024-41145 1 Microsoft 1 Teams 2025-08-26 N/A 7.1 HIGH
A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.
CVE-2023-4863 9 Bandisoft, Bentley, Debian and 6 more 12 Honeyview, Seequent Leapfrog, Debian Linux and 9 more 2025-03-13 N/A 8.8 HIGH
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
CVE-2022-21965 1 Microsoft 1 Teams 2025-01-02 5.0 MEDIUM 7.5 HIGH
Microsoft Teams Denial of Service Vulnerability
CVE-2024-21448 1 Microsoft 1 Teams 2024-12-05 N/A 5.0 MEDIUM
Microsoft Teams for Android Information Disclosure Vulnerability
CVE-2024-21374 1 Microsoft 1 Teams 2024-11-21 N/A 5.0 MEDIUM
Microsoft Teams for Android Information Disclosure Vulnerability
CVE-2023-29330 1 Microsoft 1 Teams 2024-11-21 N/A 8.8 HIGH
Microsoft Teams Remote Code Execution Vulnerability
CVE-2023-29328 1 Microsoft 1 Teams 2024-11-21 N/A 8.8 HIGH
Microsoft Teams Remote Code Execution Vulnerability
CVE-2023-24881 1 Microsoft 1 Teams 2024-11-21 N/A 6.5 MEDIUM
Microsoft Teams Information Disclosure Vulnerability
CVE-2021-24114 1 Microsoft 1 Teams 2024-11-21 3.5 LOW 5.7 MEDIUM
Microsoft Teams iOS Information Disclosure Vulnerability
CVE-2020-17091 1 Microsoft 1 Teams 2024-11-21 4.4 MEDIUM 7.8 HIGH
Microsoft Teams Remote Code Execution Vulnerability
CVE-2020-10146 1 Microsoft 1 Teams 2024-11-21 3.5 LOW 5.7 MEDIUM
The Microsoft Teams online service contains a stored cross-site scripting vulnerability in the displayName parameter that can be exploited on Teams clients to obtain sensitive information such as authentication tokens and to possibly execute arbitrary commands. This vulnerability was fixed for all Teams users in the online service on or around October 2020.
CVE-2019-5922 1 Microsoft 1 Teams 2024-11-21 6.8 MEDIUM 7.8 HIGH
Untrusted search path vulnerability in The installer of Microsoft Teams allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2024-38197 1 Microsoft 1 Teams 2024-10-22 N/A 6.5 MEDIUM
Microsoft Teams for iOS Spoofing Vulnerability