CveMateVulnerability intelligence

Microsoft Teams vulnerabilities

31 vulnerabilities

Known vulnerabilities in Microsoft Teams, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2021-24114microsoftmicrosoft teams for ios+15y ago25-02-2021 23:01

Microsoft Teams iOS Information Disclosure Vulnerability CVE-2025-53783microsoftdynamics_365_guides+121y ago12-08-2025 17:10

Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network.CVE-2025-49731microsoftmicrosoft teams for android+31y ago08-07-2025 16:57

Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network.CVE-2025-49737microsoftmicrosoft teams for mac, new edition+11y ago08-07-2025 16:58

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Teams allows an authorized attacker to elevate privileges locally.CVE-2020-17091microsoftmicrosoft teams+15y ago11-11-2020 06:48

Microsoft Teams Remote Code Execution Vulnerability CVE-2020-10146microsoftteams5y ago09-12-2020 00:30

The Microsoft Teams online service contains a stored cross-site scripting vulnerability in the displayName parameter that can be exploited on Teams clients to obtain sensitive information such as authentication tokens and to possibly execute arbitrary commands. This vulnerability was fixed for all Teams users in the online service on or around October 2020.CVE-2022-21965microsoftmicrosoft teams admin center+34y ago09-02-2022 16:36

Microsoft Teams Denial of Service Vulnerability CVE-2024-21448microsoftmicrosoft teams for android+12y ago12-03-2024 16:58

Microsoft Teams for Android Information Disclosure Vulnerability CVE-2024-21374microsoftmicrosoft teams for android+12y ago13-02-2024 18:02

Microsoft Teams for Android Information Disclosure Vulnerability CVE-2024-41138microsoftteams+11y ago18-12-2024 22:38

A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.CVE-2024-41145microsoftteams+11y ago18-12-2024 22:38

A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.CVE-2024-42004microsoftteams+11y ago18-12-2024 22:40

A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.CVE-2024-38197microsoftmicrosoft teams for ios+12y ago13-08-2024 17:29

Microsoft Teams for iOS Spoofing Vulnerability CVE-2019-5922microsoftteams+17y ago12-03-2019 21:00

Untrusted search path vulnerability in The installer of Microsoft Teams allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.CVE-2026-21535microsoftmicrosoft teams+18mo ago19-02-2026 22:06

Improper access control in Microsoft Teams allows an unauthorized attacker to disclose information over a network.CVE-2026-65767microsoftmicrosoft teams for android+12mo ago11-08-2026 17:07

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network.CVE-2026-65768microsoftmicrosoft teams for android+12mo ago11-08-2026 17:03

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network.CVE-2026-65812microsoftmicrosoft teams for android+11mo ago08-09-2026 17:17

Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.CVE-2026-65667microsoftmicrosoft teams+12mo ago06-08-2026 22:37

Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.CVE-2026-65769microsoftmicrosoft teams for ios+12mo ago11-08-2026 17:05

Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network.