TE
Product
Teams
On CISA KEVExploited in the wild
31
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 6High 14Medium 10Low 1
Watch
Add Teams to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-4863 In wildKEV | 8.8 | Sep 12 | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability Affected: before 1.6.00.26463; before 1.6.00.26474 |
| CVE-2026-65667 | 10.0 | Aug 6 | Microsoft Teams Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2026-65768 | 9.8 | Aug 11 | Microsoft Teams Remote Code Execution Vulnerability Affected: before 1.0.0.2026133602 |
| CVE-2024-42004 | 9.8 | Dec 18 | A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS Affected: 24046.2813.2770.1094 |
| CVE-2024-41145 | 9.8 | Dec 18 | A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS Affected: 24046.2813.2770.1094 |
| CVE-2024-41138 | 9.8 | Dec 18 | A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS Affected: 24046.2813.2770.1094 |
| CVE-2026-62896 | 9.6 | Aug 6 | Microsoft Teams Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2023-29330 | 8.8 | Aug 8 | Microsoft Teams Remote Code Execution Vulnerability Affected: before 1.0.0.2023070204; before 1.6.00.17554; before 1.6.00.18681; before 5.12.1 |
| CVE-2023-29328 | 8.8 | Aug 8 | Microsoft Teams Remote Code Execution Vulnerability Affected: before 1.0.0.2023070204; before 1.6.00.17554; before 1.6.00.18681; before 5.12.1 |
| CVE-2026-42835 | 8.1 | Jun 9 | Microsoft Teams for Android Information Disclosure Vulnerability Affected: before 1.0.76.2026111302 |
| CVE-2020-17091 | 7.8 | Nov 11 | Microsoft Teams Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2019-5922 | 7.8 | Mar 12 | Untrusted search path vulnerability in The installer of Microsoft Teams allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory Affected: All versions, or not specified |
| CVE-2026-65767 | 7.6 | Aug 11 | Microsoft Teams for Android Spoofing Vulnerability Affected: before 1.0.76.202611302 |
| CVE-2026-65769 | 7.5 | Aug 11 | Microsoft Teams iOS Information Disclosure Vulnerability Affected: before 8.8.1 |
| CVE-2026-62918 | 7.5 | Aug 6 | Microsoft Teams Spoofing Vulnerability Affected: All versions, or not specified |
| CVE-2026-21535 | 7.5 | Feb 19 | Microsoft Teams Information Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2025-53783 | 7.5 | Aug 12 | Microsoft Teams Remote Code Execution Vulnerability Affected: before 1.0.0.2025102802; before 7.10.1; before 25122.1207.3700.1444; before 25122.1415.3698.6812 |
| CVE-2022-21965 | 7.5 | Feb 9 | Microsoft Teams Denial of Service Vulnerability Affected: before 1.0.94.20000 |
| CVE-2026-26133 | 7.1 | Mar 13 | M365 Copilot Information Disclosure Vulnerability Affected: before 1.0.0.2026043102; before 8.3.1 |
| CVE-2025-49737 | 7.0 | Jul 8 | Microsoft Teams Elevation of Privilege Vulnerability Affected: before 25163.3001.3726.6503 |
| CVE-2026-65812 | 6.8 | Sep 8 | Microsoft Teams for Android Information Disclosure Vulnerability Affected: before 1.0.0.2026133602 |
| CVE-2026-33823 | 6.5 | May 7 | Microsoft Team Events Portal Information Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2024-38197 | 6.5 | Aug 13 | Microsoft Teams for iOS Spoofing Vulnerability Affected: through 6.19.2 |
| CVE-2023-24881 | 6.5 | Jul 11 | Microsoft Teams Information Disclosure Vulnerability Affected: before 2.10.1 |
| CVE-2026-69559 | 6.3 | Sep 8 | Microsoft Teams for Android Information Disclosure Vulnerability Affected: before 1.0.0.2026142702 |
| CVE-2021-24114 | 5.7 | Feb 25 | Microsoft Teams iOS Information Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2026-32185 | 5.5 | May 12 | Microsoft Teams Spoofing Vulnerability Affected: before 1.0.0.2026092103 |
| CVE-2020-10146 | 5.4 | Dec 9 | The Microsoft Teams online service contains a stored cross-site scripting vulnerability in the displayName parameter that can be exploited on Teams clients to obtain sensitive… Affected: before 2020-10-29 |
| CVE-2024-21448 | 5.0 | Mar 12 | Microsoft Teams for Android Information Disclosure Vulnerability Affected: before 1.0.0.2024022302 |
| CVE-2024-21374 | 5.0 | Feb 13 | Microsoft Teams for Android Information Disclosure Vulnerability Affected: before 1.0.0.2024022302 |
| CVE-2025-49731 | 3.1 | Jul 8 | Microsoft Teams Elevation of Privilege Vulnerability Affected: before 1.0.0.2025112902; before 7.10.1 |
Showing 31