What is the CVSS score of EUVD-2025-20621?

EUVD-2025-20621 has a CVSS 3.1 base score of 3.1 (Low). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.1%.

How to fix or mitigate EUVD-2025-20621?

During next maintenance window: Apply vendor patches when convenient. Monitor vendor channels for updates.

Microsoft EUVD-2025-20621

Q: Which versions of Microsoft are affected by EUVD-2025-20621?

CVE-2025-49731 is a low-severity vulnerability in Improper handling of insufficient permissions or privileges in Microsoft Teams (CVSS 3.1).. A patch is available.

| CVE-2025-49731 LOW

Improper Handling of Insufficient Permissions or Privileges (CWE-280)

2025-07-08 secure@microsoft.com

Microsoft Information Disclosure

3.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

3.1 LOW

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

7.10.1,25060212643,1.0.0.2025112902

EUVD ID Assigned

Mar 16, 2026 - 04:21 euvd

EUVD-2025-20621

Analysis Generated

Mar 16, 2026 - 04:21 vuln.today

CVE Published

Jul 08, 2025 - 17:16 nvd

LOW 3.1

DescriptionCVE.org

Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network.

AnalysisAI

A privilege escalation vulnerability in Improper handling of insufficient permissions or privileges in Microsoft Teams (CVSS 3.1) that allows an authorized attacker. Remediation should follow standard vulnerability management procedures.