Teams

3 CVEs product

Monthly

CVE-2026-21535 HIGH This Week

Microsoft Teams contains an access control vulnerability that enables unauthenticated remote attackers to extract sensitive information without user interaction. The flaw affects Teams deployments and carries a high severity rating, though no patch is currently available. Exploitation requires only network access with no additional prerequisites, making this a significant risk for organizations using the platform.

Microsoft Teams
NVD
CVSS 3.1
8.2
EPSS
0.1%
CVE-2025-53783 HIGH This Week

Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Heap Overflow Buffer Overflow Microsoft Dynamics 365 Guides Dynamics 365 Remote Assist +3
NVD
CVSS 3.1
7.5
EPSS
0.1%
CVE-2025-49737 HIGH This Week

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Teams allows an authorized attacker to elevate privileges locally.

Microsoft Race Condition Information Disclosure Teams
NVD
CVSS 3.1
7.0
EPSS
0.0%
CVE-2026-21535
EPSS 0% CVSS 8.2
HIGH This Week

Microsoft Teams contains an access control vulnerability that enables unauthenticated remote attackers to extract sensitive information without user interaction. The flaw affects Teams deployments and carries a high severity rating, though no patch is currently available. Exploitation requires only network access with no additional prerequisites, making this a significant risk for organizations using the platform.

Microsoft Teams
NVD
CVE-2025-53783
EPSS 0% CVSS 7.5
HIGH This Week

Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Heap Overflow Buffer Overflow Microsoft +5
NVD
CVE-2025-49737
EPSS 0% CVSS 7.0
HIGH This Week

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Teams allows an authorized attacker to elevate privileges locally.

Microsoft Race Condition Information Disclosure +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy